-
CVE-2025-38335
- EPSS 0.05%
- Veröffentlicht 10.07.2025 08:15:07
- Zuletzt bearbeitet 28.08.2025 15:15:48
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- Teams Watchlist Login
- Unerledigt Login
In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT When enabling PREEMPT_RT, the gpio_keys_irq_timer() callback runs in hard irq context, but the input_event() takes a spin_lock, which isn't allowed there as it is converted to a rt_spin_lock(). [ 4054.289999] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 4054.290028] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/0 ... [ 4054.290195] __might_resched+0x13c/0x1f4 [ 4054.290209] rt_spin_lock+0x54/0x11c [ 4054.290219] input_event+0x48/0x80 [ 4054.290230] gpio_keys_irq_timer+0x4c/0x78 [ 4054.290243] __hrtimer_run_queues+0x1a4/0x438 [ 4054.290257] hrtimer_interrupt+0xe4/0x240 [ 4054.290269] arch_timer_handler_phys+0x2c/0x44 [ 4054.290283] handle_percpu_devid_irq+0x8c/0x14c [ 4054.290297] handle_irq_desc+0x40/0x58 [ 4054.290307] generic_handle_domain_irq+0x1c/0x28 [ 4054.290316] gic_handle_irq+0x44/0xcc Considering the gpio_keys_irq_isr() can run in any context, e.g. it can be threaded, it seems there's no point in requesting the timer isr to run in hard irq context. Relax the hrtimer not to use the hard context.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version <
664e5a6f541ff226621487d1280d2ec28e86be28
Version
019002f20cb5b9f78d39360aff244265d035e08a
Status
affected
Version <
a8f01e51109f77229e426b57c5d19251b462c6aa
Version
019002f20cb5b9f78d39360aff244265d035e08a
Status
affected
Version <
fa53beab4740c4e5fe969f218a379f9558be33dc
Version
019002f20cb5b9f78d39360aff244265d035e08a
Status
affected
Version <
a7b79db25846459de63ca8974268f0c41c734c4b
Version
019002f20cb5b9f78d39360aff244265d035e08a
Status
affected
Version <
ec8f5da79b425deef5aebacdd4fe645620cd4f0b
Version
019002f20cb5b9f78d39360aff244265d035e08a
Status
affected
Version <
f4a8f561d08e39f7833d4a278ebfb12a41eef15f
Version
019002f20cb5b9f78d39360aff244265d035e08a
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
5.13
Status
affected
Version <
5.13
Version
0
Status
unaffected
Version <=
5.15.*
Version
5.15.190
Status
unaffected
Version <=
6.1.*
Version
6.1.148
Status
unaffected
Version <=
6.6.*
Version
6.6.101
Status
unaffected
Version <=
6.12.*
Version
6.12.41
Status
unaffected
Version <=
6.15.*
Version
6.15.4
Status
unaffected
Version <=
*
Version
6.16
Status
unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.05% | 0.164 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|