In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO… (CVE-2026-80999)
A vulnerability in the Linux kernel's Realtek DSA driver related to GPIO reset handling has been resolved. The issue involved using a non-sleeping GPIO function (gpiod_set_value) for reset operations that may sleep, causing warnings and potential improper handling. The fix replaces this with gpiod_set_value_cansleep, appropriate for sleeping controllers such as I2C I/O expanders. This change applies to kernel versions 6.9 and later where the affected helpers exist.
AI Analysis
Technical Summary
The Linux kernel Realtek DSA driver used gpiod_set_value() for reset GPIO operations in rtl83xx_reset_assert() and rtl83xx_reset_deassert(), which are called only during probe paths that may sleep. Using gpiod_set_value() with sleeping GPIO controllers like I2C I/O expanders triggers kernel warnings. The vulnerability was addressed by switching to gpiod_set_value_cansleep(), which safely handles sleeping GPIO controllers. This patch applies to kernels version 6.9 and later, as the affected helper functions were introduced in v6.9. Older stable kernels require similar changes at their respective call sites.
Potential Impact
The impact is primarily related to kernel stability and warning suppression during device probing involving reset GPIOs managed by sleeping controllers. There is no indication of direct security compromise or exploitation. The issue could cause kernel warnings and potentially affect device initialization reliability.
Mitigation Recommendations
A fix is available and has been applied to Linux kernel versions 6.9 and later by replacing gpiod_set_value() with gpiod_set_value_cansleep() in the affected reset helper functions. Older stable kernels require backporting this change at the corresponding code locations. Users should update to a patched kernel version to resolve this issue.
In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO… (CVE-2026-80999)
Description
A vulnerability in the Linux kernel's Realtek DSA driver related to GPIO reset handling has been resolved. The issue involved using a non-sleeping GPIO function (gpiod_set_value) for reset operations that may sleep, causing warnings and potential improper handling. The fix replaces this with gpiod_set_value_cansleep, appropriate for sleeping controllers such as I2C I/O expanders. This change applies to kernel versions 6.9 and later where the affected helpers exist.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel Realtek DSA driver used gpiod_set_value() for reset GPIO operations in rtl83xx_reset_assert() and rtl83xx_reset_deassert(), which are called only during probe paths that may sleep. Using gpiod_set_value() with sleeping GPIO controllers like I2C I/O expanders triggers kernel warnings. The vulnerability was addressed by switching to gpiod_set_value_cansleep(), which safely handles sleeping GPIO controllers. This patch applies to kernels version 6.9 and later, as the affected helper functions were introduced in v6.9. Older stable kernels require similar changes at their respective call sites.
Potential Impact
The impact is primarily related to kernel stability and warning suppression during device probing involving reset GPIOs managed by sleeping controllers. There is no indication of direct security compromise or exploitation. The issue could cause kernel warnings and potentially affect device initialization reliability.
Mitigation Recommendations
A fix is available and has been applied to Linux kernel versions 6.9 and later by replacing gpiod_set_value() with gpiod_set_value_cansleep() in the affected reset helper functions. Older stable kernels require backporting this change at the corresponding code locations. Users should update to a patched kernel version to resolve this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-5x4g-x6mc-9fxq
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80999"]
Threat ID: 6aa4a02b55bf5e2cf5a86b46
Added to database: 09/12/2026, 00:43:23 UTC
Last enriched: 09/12/2026, 01:22:09 UTC
Last updated: 09/12/2026, 01:22:09 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.