In the Linux kernel, the following vulnerability has been resolved:
tpm: do not start chip while suspended
Checking TPMCHIPFLAGSUSPENDED after the call to tpmfindgetops() can lead to a spurious tpmchipstart() call:
[35985.503771] i2c i2c-1: Transfer while suspended [35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 i2ctransfer+0xbe/0x810 [35985.503802] Modules linked in: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G W 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Tainted: [W]=WARN [35985.503817] Hardware name: Google Morphius/Morphius, BIOS GoogleMorphius.13434.858.0 10/26/2023 [35985.503819] RIP: 0010:i2ctransfer+0xbe/0x810 [35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe <0f> 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Call Trace: [35985.503859] <TASK> [35985.503863] ? _warn+0xd4/0x260 [35985.503868] ? _i2ctransfer+0xbe/0x810 [35985.503874] ? reportbug+0xf3/0x210 [35985.503882] ? handlebug+0x63/0xb0 [35985.503887] ? excinvalidop+0x16/0x50 [35985.503892] ? asmexcinvalidop+0x16/0x20 [35985.503904] ? _i2ctransfer+0xbe/0x810 [35985.503913] tpmcr50i2ctransfermessage+0x24/0xf0 [35985.503920] tpmcr50i2cread+0x8e/0x120 [35985.503928] tpmcr50requestlocality+0x75/0x170 [35985.503935] tpmchipstart+0x116/0x160 [35985.503942] tpmtrygetops+0x57/0x90 [35985.503948] tpmfindgetops+0x26/0xd0 [35985.503955] tpmget_random+0x2d/0x80
Don't move forward with tpmchipstart() inside tpmtrygetops(), unless TPMCHIPFLAGSUSPENDED is not set. tpmfindget_ops() will return NULL in such a failure case.
[
{
"id": "CVE-2025-23149-135d72af",
"target": {
"file": "drivers/char/tpm/tpm-interface.c",
"function": "tpm_get_random"
},
"digest": {
"function_hash": "62310965971282518680322256467497894656",
"length": 452.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17d253af4c2c8a2acf84bb55a0c2045f150b7dfd",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-1ce5ae44",
"target": {
"file": "drivers/char/tpm/tpm-interface.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"128156955233439800954262730967280652611",
"57269590668032950197739085953540378138",
"244163633340570961941005663579206354319",
"232447132246189734591473481669351705381",
"117252211465875446883085384899995267418",
"165212501683432777200735522328322868709",
"265566248473863880042430356485190618477",
"113012535877951072408026999227087283801",
"49547982622420350631288772349543300766",
"309018632326209115232282572683290795823",
"178325636819761290833728159737333451251",
"173246283011244808128265691294948585679"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17d253af4c2c8a2acf84bb55a0c2045f150b7dfd",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-20807f1a",
"target": {
"file": "drivers/char/tpm/tpm-interface.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"128156955233439800954262730967280652611",
"57269590668032950197739085953540378138",
"244163633340570961941005663579206354319",
"232447132246189734591473481669351705381",
"117252211465875446883085384899995267418",
"165212501683432777200735522328322868709",
"265566248473863880042430356485190618477",
"113012535877951072408026999227087283801",
"49547982622420350631288772349543300766",
"309018632326209115232282572683290795823",
"178325636819761290833728159737333451251",
"173246283011244808128265691294948585679"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e74e2394eed90aff5c3a08c1f51f476d4de71d02",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-39cb8e85",
"target": {
"file": "drivers/char/tpm/tpm-interface.c",
"function": "tpm_get_random"
},
"digest": {
"function_hash": "62310965971282518680322256467497894656",
"length": 452.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1404dff1e11bf927b70ac25e1de97bed9742ede4",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-60e05c51",
"target": {
"file": "drivers/char/tpm/tpm-interface.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"128156955233439800954262730967280652611",
"57269590668032950197739085953540378138",
"244163633340570961941005663579206354319",
"232447132246189734591473481669351705381",
"117252211465875446883085384899995267418",
"165212501683432777200735522328322868709",
"265566248473863880042430356485190618477",
"113012535877951072408026999227087283801",
"49547982622420350631288772349543300766",
"309018632326209115232282572683290795823",
"178325636819761290833728159737333451251",
"173246283011244808128265691294948585679"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1404dff1e11bf927b70ac25e1de97bed9742ede4",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-9cfaf847",
"target": {
"file": "drivers/char/tpm/tpm-chip.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"139896697973770467091682558521630447948",
"19586218558870054000803141689182046477",
"325577610533876681715254953941361902694",
"68883741455733869197253896028074773031"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1404dff1e11bf927b70ac25e1de97bed9742ede4",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-ba8d81d2",
"target": {
"file": "drivers/char/tpm/tpm-chip.c",
"function": "tpm_try_get_ops"
},
"digest": {
"function_hash": "184423018901528420333346112763693580454",
"length": 451.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e74e2394eed90aff5c3a08c1f51f476d4de71d02",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-cb1a68b6",
"target": {
"file": "drivers/char/tpm/tpm-chip.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"139896697973770467091682558521630447948",
"19586218558870054000803141689182046477",
"325577610533876681715254953941361902694",
"68883741455733869197253896028074773031"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17d253af4c2c8a2acf84bb55a0c2045f150b7dfd",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-d8fc6337",
"target": {
"file": "drivers/char/tpm/tpm-chip.c",
"function": "tpm_try_get_ops"
},
"digest": {
"function_hash": "184423018901528420333346112763693580454",
"length": 451.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17d253af4c2c8a2acf84bb55a0c2045f150b7dfd",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-e316fb61",
"target": {
"file": "drivers/char/tpm/tpm-chip.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"139896697973770467091682558521630447948",
"19586218558870054000803141689182046477",
"325577610533876681715254953941361902694",
"68883741455733869197253896028074773031"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e74e2394eed90aff5c3a08c1f51f476d4de71d02",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-e5a48fca",
"target": {
"file": "drivers/char/tpm/tpm-interface.c",
"function": "tpm_get_random"
},
"digest": {
"function_hash": "62310965971282518680322256467497894656",
"length": 452.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e74e2394eed90aff5c3a08c1f51f476d4de71d02",
"signature_version": "v1"
},
{
"id": "CVE-2025-23149-f499f675",
"target": {
"file": "drivers/char/tpm/tpm-chip.c",
"function": "tpm_try_get_ops"
},
"digest": {
"function_hash": "146524535729417374314848699396995108255",
"length": 392.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1404dff1e11bf927b70ac25e1de97bed9742ede4",
"signature_version": "v1"
}
]