CVE-2026-72152
Description
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() wait_event_interruptible_timeout() evaluates its condition after setting the current task state to TASK_INTERRUPTIBLE. With CONFIG_DEBUG_ATOMIC_SLEEP this triggers a warning when the IRQ wait path is used: tpm_tis_status() tpm_tis_spi_read_bytes() tpm_tis_spi_transfer_full() spi_bus_lock() mutex_lock() Address this with the following measures: 1. Call wait_tpm_stat_cond() only while tasking is running. 2. Use wait_woken() to wait for changes.
How to fix
- Linux Linux45ceeb08bf1f4f7353ffb529d8682a0cf5506318, eef71c01deb08547956df3634a0d34c6bdbcecb8, c9acbe38797bc1aa3c22a1ab72452e210af6e0ff, 6b068a97958aa00a901a9b5083d74114b21f7b66, bb63a0530e8e6de3aaf29cd5ba487db2490128ef, ba33b4f9d3423accd2c91a0b0b0680cd589922f2, 4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723, c0c9cfb3b75def8bf200a2d4db09015806acfeaf, 4.10, 4.15, 4.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < 45ceeb08bf1f4f7353ffb529d8682a0cf5506318, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < eef71c01deb08547956df3634a0d34c6bdbcecb8, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < c9acbe38797bc1aa3c22a1ab72452e210af6e0ff, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < 6b068a97958aa00a901a9b5083d74114b21f7b66, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < bb63a0530e8e6de3aaf29cd5ba487db2490128ef, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < ba33b4f9d3423accd2c91a0b0b0680cd589922f2, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < 4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723, 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 ≤ v < c0c9cfb3b75def8bf200a2d4db09015806acfeaf, cd4ae0b05126cc9461a2e50ccb745e5583cc91e2, cf503dbe5c22c6ab9797e1cf864a11597d711c3a, d229e7ecc0cb29996688f0fa98c5eb6128b81e3a, 4.9.128 ≤ v < 4.10, 4.14.71 ≤ v < 4.15, 4.18.9 ≤ v < 4.19, 4.19 | 45ceeb08bf1f4f7353ffb529d8682a0cf5506318, eef71c01deb08547956df3634a0d34c6bdbcecb8, c9acbe38797bc1aa3c22a1ab72452e210af6e0ff, 6b068a97958aa00a901a9b5083d74114b21f7b66, bb63a0530e8e6de3aaf29cd5ba487db2490128ef, ba33b4f9d3423accd2c91a0b0b0680cd589922f2, 4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723, c0c9cfb3b75def8bf200a2d4db09015806acfeaf, 4.10, 4.15, 4.19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.