๐Ÿ” CVE Alert

CVE-2024-53085

UNKNOWN 0.0

tpm: Lock TPM chip in tpm_pm_suspend() first

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpm_pm_suspend() first Setting TPM_CHIP_FLAG_SUSPENDED in the end of tpm_pm_suspend() can be racy according, as this leaves window for tpm_hwrng_read() to be called while the operation is in progress. The recent bug report gives also evidence of this behaviour. Aadress this by locking the TPM chip before checking any chip->flags both in tpm_pm_suspend() and tpm_hwrng_read(). Move TPM_CHIP_FLAG_SUSPENDED check inside tpm_get_random() so that it will be always checked only when the lock is reserved.

Vendor linux
Product linux
Ecosystems
Industries
Technology
Published Nov 19, 2024
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new unknown vulnerabilities affecting linux linux are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Linux / Linux
99d46450625590d410f86fe4660a5eff7d3b8343 < cfaf83501a0cbb104499c5b0892ee5ebde4e967f 99d46450625590d410f86fe4660a5eff7d3b8343 < bc203fe416abdd1c29da594565a7c3c4e979488e 99d46450625590d410f86fe4660a5eff7d3b8343 < 9265fed6db601ee2ec47577815387458ef4f047a 7cd46930b8bf37b84777410ac21bfdf1179021d5 eeda114c92c7b2db69878cdf27163750fd57cfe2
Linux / Linux
6.4

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
git.kernel.org: https://git.kernel.org/stable/c/cfaf83501a0cbb104499c5b0892ee5ebde4e967f git.kernel.org: https://git.kernel.org/stable/c/bc203fe416abdd1c29da594565a7c3c4e979488e git.kernel.org: https://git.kernel.org/stable/c/9265fed6db601ee2ec47577815387458ef4f047a