In the Linux kernel, the following vulnerability has been resolved:
optee: ffa: fix sleep in atomic context
The OP-TEE driver registers the function notif_callback() for FF-A notifications. However, this function is called in an atomic context leading to errors like this when processing asynchronous notifications:
| BUG: sleeping function called from invalid context at kernel/locking/mutex.c:258 | in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker/0:0 | preempt_count: 1, expected: 0 | RCU nest depth: 0, expected: 0 | CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-00019-g657536ebe0aa #13 | Hardware name: linux,dummy-virt (DT) | Workqueue: ffa_pcpu_irq_notification notif_pcpu_irq_work_fn | Call trace: | show_stack+0x18/0x24 (C) | dump_stack_lvl+0x78/0x90 | dump_stack+0x18/0x24 | __might_resched+0x114/0x170 | __might_sleep+0x48/0x98 | mutex_lock+0x24/0x80 | optee_get_msg_arg+0x7c/0x21c | simple_call_with_arg+0x50/0xc0 | optee_do_bottom_half+0x14/0x20 | notif_callback+0x3c/0x48 | handle_notif_callbacks+0x9c/0xe0 | notif_get_and_handle+0x40/0x88 | generic_exec_single+0x80/0xc0 | smp_call_function_single+0xfc/0x1a0 | notif_pcpu_irq_work_fn+0x2c/0x38 | process_one_work+0x14c/0x2b4 | worker_thread+0x2e4/0x3e0 | kthread+0x13c/0x210 | ret_from_fork+0x10/0x20
Fix this by adding work queue to process the notification in a non-atomic context.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-lg | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-gke-64kUpgrade linux-image-genericUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1044-ibm | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub