CVE-2026-72152: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpmtisspi: Use waitwoken() in waitfortmpstat()
waiteventinterruptibletimeout() evaluates its condition after setting the current task state to TASKINTERRUPTIBLE.
With CONFIGDEBUGATOMICSLEEP this triggers a warning when the IRQ wait path is used:
tpmtisstatus() tpmtisspireadbytes() tpmtisspitransferfull() spibuslock() mutexlock()
Address this with the following measures:
1. Call waittpmstatcond() only while tasking is running. 2. Use waitwoken() to wait for changes.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72152?
CVE-2026-72152 has a severity rating of 6.
What impact does CVE-2026-72152 have on system security?
CVE-2026-72152 could lead to process state warnings that may affect system stability.
How can I mitigate CVE-2026-72152?
Mitigation for CVE-2026-72152 involves ensuring your Linux kernel is updated to the latest version where the vulnerability has been resolved.
What systems are affected by CVE-2026-72152?
CVE-2026-72152 affects systems using the Linux kernel with the tpm_tis_spi driver.
What is the fix for CVE-2026-72152?
The fix for CVE-2026-72152 is included in kernel updates that implement wait_woken() in the wait_for_tmp_stat() function.