In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel-devel | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-azureUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-source-azure | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinxUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04a | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub