Skip to content
OpenAdvisories
Unscored CVE-2023-53099 EUVD-2025-13164GHSA-jgfw-fjpj-4wm9

firmware: xilinx: don't make a sleepable memory allocation from an atomic context

Published May 2, 2025 · Updated May 23, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-azure Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.8 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.8 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-nvidia Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.5 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.5 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: xilinx: don't make a sleepable memory allocation from an atomic context

The following issue was discovered using lockdep:
[ 6.691371] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:209
[ 6.694602] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: swapper/0
[ 6.702431] 2 locks held by swapper/0/1:
[ 6.706300] #0: ffffff8800f6f188 (&dev->mutex){....}-{3:3}, at: __device_driver_lock+0x4c/0x90
[ 6.714900] #1: ffffffc009a2abb8 (enable_lock){....}-{2:2}, at: clk_enable_lock+0x4c/0x140
[ 6.723156] irq event stamp: 304030
[ 6.726596] hardirqs last enabled at (304029): [<ffffffc008d17ee0>] _raw_spin_unlock_irqrestore+0xc0/0xd0
[ 6.736142] hardirqs last disabled at (304030): [<ffffffc00876bc5c>] clk_enable_lock+0xfc/0x140
[ 6.744742] softirqs last enabled at (303958): [<ffffffc0080904f0>] _stext+0x4f0/0x894
[ 6.752655] softirqs last disabled at (303951): [<ffffffc0080e53b8>] irq_exit+0x238/0x280
[ 6.760744] CPU: 1 PID: 1 Comm: swapper/0 Tainted: G U 5.15.36 #2
[ 6.768048] Hardware name: xlnx,zynqmp (DT)
[ 6.772179] Call trace:
[ 6.774584] dump_backtrace+0x0/0x300
[ 6.778197] show_stack+0x18/0x30
[ 6.781465] dump_stack_lvl+0xb8/0xec
[ 6.785077] dump_stack+0x1c/0x38
[ 6.788345] ___might_sleep+0x1a8/0x2a0
[ 6.792129] __might_sleep+0x6c/0xd0
[ 6.795655] kmem_cache_alloc_trace+0x270/0x3d0
[ 6.800127] do_feature_check_call+0x100/0x220
[ 6.804513] zynqmp_pm_invoke_fn+0x8c/0xb0
[ 6.808555] zynqmp_pm_clock_getstate+0x90/0xe0
[ 6.813027] zynqmp_pll_is_enabled+0x8c/0x120
[ 6.817327] zynqmp_pll_enable+0x38/0xc0
[ 6.821197] clk_core_enable+0x144/0x400
[ 6.825067] clk_core_enable+0xd4/0x400
[ 6.828851] clk_core_enable+0xd4/0x400
[ 6.832635] clk_core_enable+0xd4/0x400
[ 6.836419] clk_core_enable+0xd4/0x400
[ 6.840203] clk_core_enable+0xd4/0x400
[ 6.843987] clk_core_enable+0xd4/0x400
[ 6.847771] clk_core_enable+0xd4/0x400
[ 6.851555] clk_core_enable_lock+0x24/0x50
[ 6.855683] clk_enable+0x24/0x40
[ 6.858952] fclk_probe+0x84/0xf0
[ 6.862220] platform_probe+0x8c/0x110
[ 6.865918] really_probe+0x110/0x5f0
[ 6.869530] __driver_probe_device+0xcc/0x210
[ 6.873830] driver_probe_device+0x64/0x140
[ 6.877958] __driver_attach+0x114/0x1f0
[ 6.881828] bus_for_each_dev+0xe8/0x160
[ 6.885698] driver_attach+0x34/0x50
[ 6.889224] bus_add_driver+0x228/0x300
[ 6.893008] driver_register+0xc0/0x1e0
[ 6.896792] __platform_driver_register+0x44/0x60
[ 6.901436] fclk_driver_init+0x1c/0x28
[ 6.905220] do_one_initcall+0x104/0x590
[ 6.909091] kernel_init_freeable+0x254/0x2bc
[ 6.913390] kernel_init+0x24/0x130
[ 6.916831] ret_from_fork+0x10/0x20

Fix it by passing the GFP_ATOMIC gfp flag for the corresponding
memory allocation.

Affected products

VendorProductAffectedFixed
Linux Linux 5.9.12 – < 5.10, 5.10 5.10

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.1.25-1 —
Debian 13 linux 6.1.25-1 —
Debian 12 linux 6.1.25-1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1022.24 —
Ubuntu 24.04 LTS linux-realtime +1 No fix yet —
Ubuntu 22.04 LTS linux 5.15.0-79.86 —
Ubuntu 22.04 LTS linux-aws 5.15.0-1042.47 —
Ubuntu 22.04 LTS linux-azure 5.15.0-1045.52 —
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1045.52.1 —
Ubuntu 22.04 LTS linux-gcp 5.15.0-1039.47 —
Ubuntu 22.04 LTS linux-gke +1 5.15.0-1039.44 —
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1025.30 —
Ubuntu 22.04 LTS linux-ibm +1 5.15.0-1035.38 —
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1037.42 —
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-79.88 —
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1030.30 —
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1016.16 —
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1002.2 —
Ubuntu 22.04 LTS linux-oracle 5.15.0-1040.46 —
Ubuntu 22.04 LTS linux-riscv +31 No fix yet —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1025.29 —
Ubuntu 20.04 LTS linux-aws-5.15 5.15.0-1041.46~20.04.1 —
Ubuntu 20.04 LTS linux-azure-5.15 5.15.0-1045.52~20.04.1 —
Ubuntu 20.04 LTS linux-gcp-5.15 5.15.0-1039.47~20.04.1 —
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 20.04 LTS linux-hwe-5.15 5.15.0-79.86~20.04.2 —
Ubuntu 20.04 LTS linux-ibm-5.15 5.15.0-1036.39~20.04.1 —
Ubuntu 20.04 LTS linux-intel-iotg-5.15 5.15.0-1037.42~20.04.1 —
Ubuntu 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-79.88~20.04.1 —
Ubuntu 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1016.16~20.04.1 —
Ubuntu 20.04 LTS linux-oracle-5.15 5.15.0-1040.46~20.04.1 —
Ubuntu 20.04 LTS linux-riscv-5.15 5.15.0-1038.42~20.04.2 —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1036.38 —
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1043.48 —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLES for SAP 15 SP5 kernel-docs +4 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SLES for SAP 15 SP4 kernel-docs +4 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.97.1 SUSE-SU-2025:01966-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLE Micro 5.4 kernel-default 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SLE Micro 5.4 kernel-rt +1 5.14.21-150400.15.121.1 SUSE-SU-2025:01918-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SLE Micro 5.3 kernel-rt +1 5.14.21-150400.15.121.1 SUSE-SU-2025:01918-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_27 1-150500.11.7.1 SUSE-SU-2025:02173-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_41 1-150400.9.3.1 SUSE-SU-2025:02262-1
SLE HPC 15 SP5 kernel-64kb +5 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLE HPC 15 SP4 kernel-64kb +5 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SUSE Manager Server 4.3 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SUSE Manager Server 4.3 kernel-syms +3 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SUSE Manager Proxy 4.3 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SUSE Manager Proxy 4.3 kernel-syms +2 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1

Advisories 4

References