CVE-2026-72152

CVE-2026-72152

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

wait_event_interruptible_timeout() evaluates its condition after setting

the current task state to TASK_INTERRUPTIBLE.

With CONFIG_DEBUG_ATOMIC_SLEEP this triggers a warning when the IRQ wait

path is used:

tpm_tis_status()

tpm_tis_spi_read_bytes()

tpm_tis_spi_transfer_full()

spi_bus_lock()

mutex_lock()

Address this with the following measures:

1. Call wait_tpm_stat_cond() only while tasking is running.

2. Use wait_woken() to wait for changes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Published
2026-08-15T10:21Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:53Z
    tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
    cvelistv5