CVE-2026-72432: tpm_crb: Check ACPI_COMPANION() against NULL during probe
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
tpmcrb: Check ACPICOMPANION() against NULL during probe
Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence.
Accordingly, add a requisite ACPICOMPANION() check against NULL to the tpmcrb driver.
Affected Software
1 affected component
Linux Kernel tpm_crb
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update the Linux kernel tpm_crb driver to add a requisite ACPI_COMPANION() check against NULL during probe (so the driver verifies the presence of the device's ACPI companion).
tpm_crb driver (Linux kernel) ACPI companion pointer check during probe = Add ACPI_COMPANION() NULL check
Event History
Aug 15, 2026
CVE Published
via MITRE·05:56 AM
Data Sourced
via MITRE·05:56 AM
Description