In the Linux kernel, the following vulnerability has been resolved:
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
When enabling PREEMPT_RT, the gpio_keys_irq_timer() callback runs in hard irq context, but the input_event() takes a spin_lock, which isn't allowed there as it is converted to a rt_spin_lock().
[ 4054.289999] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 4054.290028] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/0 ... [ 4054.290195] __might_resched+0x13c/0x1f4 [ 4054.290209] rt_spin_lock+0x54/0x11c [ 4054.290219] input_event+0x48/0x80 [ 4054.290230] gpio_keys_irq_timer+0x4c/0x78 [ 4054.290243] __hrtimer_run_queues+0x1a4/0x438 [ 4054.290257] hrtimer_interrupt+0xe4/0x240 [ 4054.290269] arch_timer_handler_phys+0x2c/0x44 [ 4054.290283] handle_percpu_devid_irq+0x8c/0x14c [ 4054.290297] handle_irq_desc+0x40/0x58 [ 4054.290307] generic_handle_domain_irq+0x1c/0x28 [ 4054.290316] gic_handle_irq+0x44/0xcc
Considering the gpio_keys_irq_isr() can run in any context, e.g. it can be threaded, it seems there's no point in requesting the timer isr to run in hard irq context.
Relax the hrtimer not to use the hard context.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-symsUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-virtualUpgrade linux-image-aws-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-azure-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-realtime-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-aws | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub