In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80
Don't move forward with tpm_chip_start() inside tpm_try_get_ops(), unless TPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in such a failure case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel6.12-modules-extraUpgrade kernel6.12 | Aug 5, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-docs | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibm-classicUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04 | Jun 26, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub