Riskcovery

CVE-2024-53085

tpm: Lock TPM chip in tpm_pm_suspend() first

State
Published
Severity
Not scored
Published
Nov 19, 2024
Updated
May 23, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tpm: Lock TPM chip in tpm_pm_suspend() first

Setting TPM_CHIP_FLAG_SUSPENDED in the end of tpm_pm_suspend() can be racy according, as this leaves window for tpm_hwrng_read() to be called while the operation is in progress. The recent bug report gives also evidence of this behaviour.

Aadress this by locking the TPM chip before checking any chip->flags both in tpm_pm_suspend() and tpm_hwrng_read(). Move TPM_CHIP_FLAG_SUSPENDED check inside tpm_get_random() so that it will be always checked only when the lock is reserved.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99d46450625590d410f86fe4660a5eff7d3b8343 to before cfaf83501a0cbb104499c5b0892ee5ebde4e967fAffected
  • 99d46450625590d410f86fe4660a5eff7d3b8343 to before bc203fe416abdd1c29da594565a7c3c4e979488eAffected
  • 99d46450625590d410f86fe4660a5eff7d3b8343 to before 9265fed6db601ee2ec47577815387458ef4f047aAffected
  • 7cd46930b8bf37b84777410ac21bfdf1179021d5Affected
  • eeda114c92c7b2db69878cdf27163750fd57cfe2Affected
  • 6.1.31 to before 6.2Affected
  • 6.3.5 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.11.8 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.