Skip to content
Heist/ feed
Unrated

net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xx_reset_assert() and rtl83xx_reset_deassert() are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleeping controller such as an I2C I/O expander, gpiod_set_value() warns: WARNING: drivers/gpio/gpiolib.c:4030 at gpiod_set_value+0x44/0x80, CPU#1: kworker/u16:4/61 Hardware name: B&O MAP CA33 Rev f (UNKNOWN) (DT) Workqueue: events_unbound deferred_probe_work_func pc : gpiod_set_value+0x44/0x80 lr : rtl83xx_probe+0x1d8/0x3a0 Call trace: gpiod_set_value+0x44/0x80 (P) rtl83xx_probe+0x1d8/0x3a0 realtek_mdio_probe+0x24/0xa0 mdio_probe+0x38/0x78 really_probe+0xc4/0x3e0 __driver_probe_device+0x15c/0x1b8 driver_probe_device+0xb4/0x120 __device_attach_driver+0xb8/0x1a0 bus_for_each_drv+0x88/0xf0 __device_attach+0xa0/0x1d8 device_initial_probe+0x54/0x68 bus_probe_device+0x38/0xa0 deferred_probe_work_func+0xb8/0x120 process_one_work+0x184/0x4e8 worker_thread+0x188/0x308 kthread+0x130/0x150 ret_from_fork+0x10/0x20 Switch both helpers to gpiod_set_value_cansleep() so such a reset GPIO can be used without triggering the warning. The reset GPIO has been driven with the non-sleeping gpiod_set_value() since the driver was added in v4.19. The call has since been refactored across several files - from realtek-smi.c / realtek-mdio.c into the common rtl83xx.c module and then into the rtl83xx_reset_as

Announced Source revision 1
Original source ↗

CVE-2026-80999

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-80999

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "d8652956cf37c5caa8c19e0b99ce5ca235c6d5de",
        "lessThan": "c32cf5292a0dd70c4afc138b4dc45743a190cd5a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "d8652956cf37c5caa8c19e0b99ce5ca235c6d5de",
        "lessThan": "f71087e7c63aa3e99bf65d7ddf91eb4fd3545778",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "d8652956cf37c5caa8c19e0b99ce5ca235c6d5de",
        "lessThan": "1610a8c2b93e815e3dc8643a2a69ab1c37975a6a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "d8652956cf37c5caa8c19e0b99ce5ca235c6d5de",
        "lessThan": "fb58b6a696b30bcbfbe0cfc0a91b19c816a955fc",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/dsa/realtek/rtl83xx.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.19"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.19",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.12.109",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.50",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.2.4",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.*"
      },
      {
        "status": "unaffected",
        "version": "7.3",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/dsa/realtek/rtl83xx.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-80999

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#34956 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement