Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-53085

tpm: Lock TPM chip in tpm_pm_suspend() first

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpm_pm_suspend() first Setting TPM_CHIP_FLAG_SUSPENDED in the end of tpm_pm_suspend() can be racy according, as this leaves window for tpm_hwrng_read() to be called while the operation is in progress. The recent bug report gives also evidence of this behaviour. Aadress this by locking the TPM chip before checking any chip->flags both in tpm_pm_suspend() and tpm_hwrng_read(). Move TPM_CHIP_FLAG_SUSPENDED check inside tpm_get_random() so that it will be always checked only when the lock is reserved.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 99d46450625590d410f86fe4660a5eff7d3b8343 to < cfaf83501a0cbb104499c5b0892ee5ebde4e967faffected
  • 99d46450625590d410f86fe4660a5eff7d3b8343 to < bc203fe416abdd1c29da594565a7c3c4e979488eaffected
  • 99d46450625590d410f86fe4660a5eff7d3b8343 to < 9265fed6db601ee2ec47577815387458ef4f047aaffected
  • 7cd46930b8bf37b84777410ac21bfdf1179021d5affected
  • eeda114c92c7b2db69878cdf27163750fd57cfe2affected
  • 6.1.31 to < 6.2affected
  • 6.3.5 to < 6.4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.11.8 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References