In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-devel | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-symsUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-livepatch | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-fipsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-oracle | Jun 26, 2025 | May 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub