Skip to main content

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO… (CVE-2026-80999)

0
Low
Published: 09/11/2026 (09/11/2026, 21:31:23 UTC)
Source: GCVE Database

Description

A vulnerability in the Linux kernel's Realtek DSA driver related to GPIO reset handling has been resolved. The issue involved using a non-sleeping GPIO function (gpiod_set_value) for reset operations that may sleep, causing warnings and potential improper handling. The fix replaces this with gpiod_set_value_cansleep, appropriate for sleeping controllers such as I2C I/O expanders. This change applies to kernel versions 6.9 and later where the affected helpers exist.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/12/2026, 01:22:09 UTC

Technical Analysis

The Linux kernel Realtek DSA driver used gpiod_set_value() for reset GPIO operations in rtl83xx_reset_assert() and rtl83xx_reset_deassert(), which are called only during probe paths that may sleep. Using gpiod_set_value() with sleeping GPIO controllers like I2C I/O expanders triggers kernel warnings. The vulnerability was addressed by switching to gpiod_set_value_cansleep(), which safely handles sleeping GPIO controllers. This patch applies to kernels version 6.9 and later, as the affected helper functions were introduced in v6.9. Older stable kernels require similar changes at their respective call sites.

Potential Impact

The impact is primarily related to kernel stability and warning suppression during device probing involving reset GPIOs managed by sleeping controllers. There is no indication of direct security compromise or exploitation. The issue could cause kernel warnings and potentially affect device initialization reliability.

Mitigation Recommendations

A fix is available and has been applied to Linux kernel versions 6.9 and later by replacing gpiod_set_value() with gpiod_set_value_cansleep() in the affected reset helper functions. Older stable kernels require backporting this change at the corresponding code locations. Users should update to a patched kernel version to resolve this issue.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-5x4g-x6mc-9fxq
Osv Schema Version
1.4.0
Aliases
["CVE-2026-80999"]

Threat ID: 6aa4a02b55bf5e2cf5a86b46

Added to database: 09/12/2026, 00:43:23 UTC

Last enriched: 09/12/2026, 01:22:09 UTC

Last updated: 09/12/2026, 01:22:09 UTC

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses