In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-tools-develUpgrade perf6.12-debuginfo | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade kernel-symsUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-manUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-intel-iot-realtime | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub