In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfo | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-develUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-default-manUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade dtb-amd | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8 | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub