In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel-headersUpgrade perf6.12-debuginfo | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-appleUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-awsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub