In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kernel-docs-html | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-6.8Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8 | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub