Skip to content
OpenAdvisories
Unscored CVE-2023-54322 EUVD-2023-60482GHSA-3rp4-j8x5-r3q5

arm64: set __exception_irq_entry with __irq_entry as a default

Published Dec 30, 2025 · Updated Jun 1, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lts-xenial Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.5 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: set __exception_irq_entry with __irq_entry as a default

filter_irq_stacks() is supposed to cut entries which are related irq entries
from its call stack.
And in_irqentry_text() which is called by filter_irq_stacks()
uses __irqentry_text_start/end symbol to find irq entries in callstack.

But it doesn't work correctly as without "CONFIG_FUNCTION_GRAPH_TRACER",
arm64 kernel doesn't include gic_handle_irq which is entry point of arm64 irq
between __irqentry_text_start and __irqentry_text_end as we discussed in below link.
https://lore.kernel.org/all/CACT4Y+aReMGLYua2rCLHgFpS9io5cZC04Q8GLs-uNmrn1ezxYQ@mail.gmail.com/#t

This problem can makes unintentional deep call stack entries especially
in KASAN enabled situation as below.

[ 2479.383395]I[0:launcher-loader: 1719] Stack depot reached limit capacity
[ 2479.383538]I[0:launcher-loader: 1719] WARNING: CPU: 0 PID: 1719 at lib/stackdepot.c:129 __stack_depot_save+0x464/0x46c
[ 2479.385693]I[0:launcher-loader: 1719] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[ 2479.385724]I[0:launcher-loader: 1719] pc : __stack_depot_save+0x464/0x46c
[ 2479.385751]I[0:launcher-loader: 1719] lr : __stack_depot_save+0x460/0x46c
[ 2479.385774]I[0:launcher-loader: 1719] sp : ffffffc0080073c0
[ 2479.385793]I[0:launcher-loader: 1719] x29: ffffffc0080073e0 x28: ffffffd00b78a000 x27: 0000000000000000
[ 2479.385839]I[0:launcher-loader: 1719] x26: 000000000004d1dd x25: ffffff891474f000 x24: 00000000ca64d1dd
[ 2479.385882]I[0:launcher-loader: 1719] x23: 0000000000000200 x22: 0000000000000220 x21: 0000000000000040
[ 2479.385925]I[0:launcher-loader: 1719] x20: ffffffc008007440 x19: 0000000000000000 x18: 0000000000000000
[ 2479.385969]I[0:launcher-loader: 1719] x17: 2065726568207475 x16: 000000000000005e x15: 2d2d2d2d2d2d2d20
[ 2479.386013]I[0:launcher-loader: 1719] x14: 5d39313731203a72 x13: 00000000002f6b30 x12: 00000000002f6af8
[ 2479.386057]I[0:launcher-loader: 1719] x11: 00000000ffffffff x10: ffffffb90aacf000 x9 : e8a74a6c16008800
[ 2479.386101]I[0:launcher-loader: 1719] x8 : e8a74a6c16008800 x7 : 00000000002f6b30 x6 : 00000000002f6af8
[ 2479.386145]I[0:launcher-loader: 1719] x5 : ffffffc0080070c8 x4 : ffffffd00b192380 x3 : ffffffd0092b313c
[ 2479.386189]I[0:launcher-loader: 1719] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000022
[ 2479.386231]I[0:launcher-loader: 1719] Call trace:
[ 2479.386248]I[0:launcher-loader: 1719] __stack_depot_save+0x464/0x46c
[ 2479.386273]I[0:launcher-loader: 1719] kasan_save_stack+0x58/0x70
[ 2479.386303]I[0:launcher-loader: 1719] save_stack_info+0x34/0x138
[ 2479.386331]I[0:launcher-loader: 1719] kasan_save_free_info+0x18/0x24
[ 2479.386358]I[0:launcher-loader: 1719] ____kasan_slab_free+0x16c/0x170
[ 2479.386385]I[0:launcher-loader: 1719] __kasan_slab_free+0x10/0x20
[ 2479.386410]I[0:launcher-loader: 1719] kmem_cache_free+0x238/0x53c
[ 2479.386435]I[0:launcher-loader: 1719] mempool_free_slab+0x1c/0x28
[ 2479.386460]I[0:launcher-loader: 1719] mempool_free+0x7c/0x1a0
[ 2479.386484]I[0:launcher-loader: 1719] bvec_free+0x34/0x80
[ 2479.386514]I[0:launcher-loader: 1719] bio_free+0x60/0x98
[ 2479.386540]I[0:launcher-loader: 1719] bio_put+0x50/0x21c
[ 2479.386567]I[0:launcher-loader: 1719] f2fs_write_end_io+0x4ac/0x4d0
[ 2479.386594]I[0:launcher-loader: 1719] bio_endio+0x2dc/0x300
[ 2479.386622]I[0:launcher-loader: 1719] __dm_io_complete+0x324/0x37c
[ 2479.386650]I[0:launcher-loader: 1719] dm_io_dec_pending+0x60/0xa4
[ 2479.386676]I[0:launcher-loader: 1719] clone_endio+0xf8/0x2f0
[ 2479.386700]I[0:launcher-loader: 1719] bio_endio+0x2dc/0x300
[ 2479.386727]I[0:launcher-loader: 1719] blk_update_request+0x258/0x63c
[ 2479.386754]I[0:launcher-loader: 1719] scsi_end_request+0x50/0x304
[ 2479.386782]I[0:launcher-loader: 1719] scsi_io_completion+0x88/0x160
[ 2479.386808]I[0:launcher-loader: 1719] scsi_finish_command+0x17c/0x194
[ 2479.386833]I
---truncated---

Affected products

VendorProductAffectedFixed
Linux Linux 4.3 5.10.188

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.4.11-1 —
Debian 13 linux 6.4.11-1 —
Debian 12 linux 6.1.176-1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1044.46 —
Ubuntu 24.04 LTS linux-riscv +10 No fix yet —
Ubuntu 22.04 LTS linux 5.15.0-112.122 —
Ubuntu 22.04 LTS linux-aws 5.15.0-1063.69 —
Ubuntu 22.04 LTS linux-azure 5.15.0-1066.75 —
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1067.76.1 —
Ubuntu 22.04 LTS linux-gcp 5.15.0-1062.70 —
Ubuntu 22.04 LTS linux-gke 5.15.0-1060.66 —
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1046.53 —
Ubuntu 22.04 LTS linux-ibm 5.15.0-1056.59 —
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1058.64 —
Ubuntu 22.04 LTS linux-kvm 5.15.0-1060.65 —
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-110.120 —
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1058.59 —
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1026.26 —
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1015.15 —
Ubuntu 22.04 LTS linux-oracle 5.15.0-1061.67 —
Ubuntu 22.04 LTS linux-raspi 5.15.0-1058.61 —
Ubuntu 22.04 LTS linux-riscv +32 No fix yet —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1030.34 —
Ubuntu 20.04 LTS linux-aws-5.15 5.15.0-1063.69~20.04.1 —
Ubuntu 20.04 LTS linux-azure-5.15 5.15.0-1065.74~20.04.1 —
Ubuntu 20.04 LTS linux-gcp-5.15 5.15.0-1062.70~20.04.1 —
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 20.04 LTS linux-hwe-5.15 5.15.0-113.123~20.04.1 —
Ubuntu 20.04 LTS linux-ibm-5.15 5.15.0-1057.60~20.04.1 —
Ubuntu 20.04 LTS linux-intel-iotg-5.15 5.15.0-1058.64~20.04.1 —
Ubuntu 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-110.120~20.04.1 —
Ubuntu 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1027.27~20.04.1 —
Ubuntu 20.04 LTS linux-oracle-5.15 5.15.0-1061.67~20.04.1 —
Ubuntu 20.04 LTS linux-riscv-5.15 5.15.0-1059.63~20.04.1 —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1056.58 —
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1064.72 —
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 22.04 LTS linux-aws-fips 5.15.0-1063.69+fips1 —
Ubuntu Pro FIPS-updates 22.04 LTS linux-azure-fips 5.15.0-1065.74+fips1 —
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips 5.15.0-111.121+fips1 —
Ubuntu Pro FIPS-updates 22.04 LTS linux-gcp-fips 5.15.0-1062.70+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro 20.04 LTS linux +10 No fix yet —
Ubuntu Pro 18.04 LTS linux +12 No fix yet —
Ubuntu Pro 16.04 LTS linux +7 No fix yet —
Ubuntu Pro 14.04 LTS linux-aws +2 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 rv +77 5.14.0-570.12.1.el9_6 RHSA-2025:6966
ReleasePackageFixed inAdvisory
SLES 15 SP7 kernel-64kb +6 6.4.0-150700.53.28.1 SUSE-SU-2026:0315-1
SLES 15 SP7 kernel-azure +2 6.4.0-150700.20.24.1 SUSE-SU-2026:0281-1
SLES 15 SP7 kernel-default-base 6.4.0-150700.53.28.1.150700.17.19.1 SUSE-SU-2026:0315-1
SLES 15 SP6 kernel-64kb +6 6.4.0-150600.23.84.1 SUSE-SU-2026:0293-1
SLES 15 SP6 kernel-default-base 6.4.0-150600.23.84.1.150600.12.38.1 SUSE-SU-2026:0293-1
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.133.1 SUSE-SU-2026:0317-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.133.1.150500.6.65.1 SUSE-SU-2026:0317-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP6 kernel-default-base 6.4.0-150600.23.84.1.150600.12.38.1 SUSE-SU-2026:0293-1
SLES for SAP 15 SP6 kernel-docs +4 6.4.0-150600.23.84.1 SUSE-SU-2026:0293-1
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.133.1.150500.6.65.1 SUSE-SU-2026:0317-1
SLES for SAP 15 SP5 kernel-docs +4 5.14.21-150500.55.133.1 SUSE-SU-2026:0317-1
SLE Micro 6.1 kernel-default-base 6.4.0-39.1.21.16 SUSE-SU-2026:20498-1
SLE Micro 6.1 kernel-rt +1 6.4.0-40.1 SUSE-SU-2026:20876-1
SLE Micro 6.1 kernel-source +2 6.4.0-39.1 SUSE-SU-2026:20498-1
SLE Micro 6.0 kernel-default-base 6.4.0-39.1.21.16 SUSE-SU-2026:20477-1
SLE Micro 6.0 kernel-rt +1 6.4.0-40.1 SUSE-SU-2026:20845-1
SLE Micro 6.0 kernel-source +2 6.4.0-39.1 SUSE-SU-2026:20477-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.133.1.150500.6.65.1 SUSE-SU-2026:0317-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.118.1 SUSE-SU-2026:0263-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.133.1 SUSE-SU-2026:0317-1
SLE Live Patching 15 SP7 kernel-default 6.4.0-150700.53.28.1 SUSE-SU-2026:0315-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_8 1-150700.1.3.1 SUSE-SU-2026:0278-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_8 1-150700.15.3.1 SUSE-SU-2026:0315-1
SLE Live Patching 15 SP6 kernel-default 6.4.0-150600.23.84.1 SUSE-SU-2026:0293-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_19 1-150600.13.3.1 SUSE-SU-2026:0293-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.133.1 SUSE-SU-2026:0317-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_34 1-150500.11.3.1 SUSE-SU-2026:0317-1
SLE HPC 15 SP5 kernel-64kb +5 5.14.21-150500.55.133.1 SUSE-SU-2026:0317-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.133.1.150500.6.65.1 SUSE-SU-2026:0317-1
SUSE Real Time Module 15 SP7 kernel-rt +2 6.4.0-150700.7.28.1 SUSE-SU-2026:0278-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.6 dtb-aarch64 +10 6.4.0-150600.23.84.1 SUSE-SU-2026:0293-1
openSUSE Leap 15.6 kernel-default-base 6.4.0-150600.23.84.1.150600.12.38.1 SUSE-SU-2026:0293-1

Advisories 12

References