In the Linux kernel, the following vulnerability has been resolved:
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
When enabling PREEMPT_RT, the gpio_keys_irq_timer() callback runs in hard irq context, but the input_event() takes a spin_lock, which isn't allowed there as it is converted to a rt_spin_lock().
[ 4054.289999] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 4054.290028] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/0 ... [ 4054.290195] __might_resched+0x13c/0x1f4 [ 4054.290209] rt_spin_lock+0x54/0x11c [ 4054.290219] input_event+0x48/0x80 [ 4054.290230] gpio_keys_irq_timer+0x4c/0x78 [ 4054.290243] __hrtimer_run_queues+0x1a4/0x438 [ 4054.290257] hrtimer_interrupt+0xe4/0x240 [ 4054.290269] arch_timer_handler_phys+0x2c/0x44 [ 4054.290283] handle_percpu_devid_irq+0x8c/0x14c [ 4054.290297] handle_irq_desc+0x40/0x58 [ 4054.290307] generic_handle_domain_irq+0x1c/0x28 [ 4054.290316] gic_handle_irq+0x44/0xcc
Considering the gpio_keys_irq_isr() can run in any context, e.g. it can be threaded, it seems there's no point in requesting the timer isr to run in hard irq context.
Relax the hrtimer not to use the hard context.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-obs-qa | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-xilinxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-64k | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub