Riskcovery

CVE-2026-72432

tpm_crb: Check ACPI_COMPANION() against NULL during probe

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tpm_crb: Check ACPI_COMPANION() against NULL during probe

Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence.

Accordingly, add a requisite ACPI_COMPANION() check against NULL to the tpm_crb driver.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 48fe2cddc85c7849463bd01ae8b8c6b575ff508b to before c041d2be785feb9b5e36331921eadaefbe65349dAffected
  • 48fe2cddc85c7849463bd01ae8b8c6b575ff508b to before ddd33806b8911fa2ef849e8bbbab1e3fcb26adc0Affected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.