CVE-2024-53085
Published: Nov 19, 2024
Modified: May 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpm_pm_suspend() first Setting TPM_CHIP_FLAG_SUSPENDED in the end of tpm_pm_suspend() can be racy according, as this leaves window for tpm_hwrng_read() to be called while the operation is in progress. The recent bug report gives also evidence of this behaviour. Aadress this by locking the TPM chip before checking any chip->flags both in tpm_pm_suspend() and tpm_hwrng_read(). Move TPM_CHIP_FLAG_SUSPENDED check inside tpm_get_random() so that it will be always checked only when the lock is reserved.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 99d46450625590d410f86fe4660a5eff7d3b8343 - < cfaf83501a0cbb104499c5b0892ee5ebde4e967faffected 99d46450625590d410f86fe4660a5eff7d3b8343 - < bc203fe416abdd1c29da594565a7c3c4e979488eaffected 99d46450625590d410f86fe4660a5eff7d3b8343 - < 9265fed6db601ee2ec47577815387458ef4f047aaffected 7cd46930b8bf37b84777410ac21bfdf1179021d5affected eeda114c92c7b2db69878cdf27163750fd57cfe2+2 more versions |
Linux | Linux | affected 6.4unaffected 0 - < 6.4unaffected 6.6.64 - <= 6.6.*unaffected 6.11.8 - <= 6.11.*unaffected 6.12 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now