---
id: CVE-2026-72152
title: 'tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

  wait_event_interruptible_timeout() evaluates its condition after setting
  the current task state to TASK_INTER…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    45ceeb08bf1f4f7353ffb529d8682a0cf5506318
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    eef71c01deb08547956df3634a0d34c6bdbcecb8
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    c9acbe38797bc1aa3c22a1ab72452e210af6e0ff
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    6b068a97958aa00a901a9b5083d74114b21f7b66
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    bb63a0530e8e6de3aaf29cd5ba487db2490128ef
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    ba33b4f9d3423accd2c91a0b0b0680cd589922f2
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723
  - >-
    Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 <
    c0c9cfb3b75def8bf200a2d4db09015806acfeaf
  - Linux cd4ae0b05126cc9461a2e50ccb745e5583cc91e2
  - Linux cf503dbe5c22c6ab9797e1cf864a11597d711c3a
  - Linux d229e7ecc0cb29996688f0fa98c5eb6128b81e3a
  - Linux >= 4.9.128 < 4.10
  - Linux >= 4.14.71 < 4.15
  - Linux >= 4.18.9 < 4.19
  - Linux 4.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:52:04.110205Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:21.086Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72152'
references:
  - url: 'https://git.kernel.org/stable/c/45ceeb08bf1f4f7353ffb529d8682a0cf5506318'
  - url: 'https://git.kernel.org/stable/c/eef71c01deb08547956df3634a0d34c6bdbcecb8'
  - url: 'https://git.kernel.org/stable/c/c9acbe38797bc1aa3c22a1ab72452e210af6e0ff'
  - url: 'https://git.kernel.org/stable/c/6b068a97958aa00a901a9b5083d74114b21f7b66'
  - url: 'https://git.kernel.org/stable/c/bb63a0530e8e6de3aaf29cd5ba487db2490128ef'
  - url: 'https://git.kernel.org/stable/c/ba33b4f9d3423accd2c91a0b0b0680cd589922f2'
  - url: 'https://git.kernel.org/stable/c/4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723'
  - url: 'https://git.kernel.org/stable/c/c0c9cfb3b75def8bf200a2d4db09015806acfeaf'
tags:
  - cve.org
epss: 0.00216
epssPercentile: 0.12152
ingestedAt: '2026-11-06T18:00:12.591Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

wait_event_interruptible_timeout() evaluates its condition after setting
the current task state to TASK_INTERRUPTIBLE.

With CONFIG_DEBUG_ATOMIC_SLEEP this triggers a warning when the IRQ wait
path is used:

    tpm_tis_status()
      tpm_tis_spi_read_bytes()
        tpm_tis_spi_transfer_full()
          spi_bus_lock()
            mutex_lock()

Address this with the following measures:

1. Call wait_tpm_stat_cond() only while tasking is running.
2. Use wait_woken() to wait for changes.

## Affected

- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < 45ceeb08bf1f4f7353ffb529d8682a0cf5506318`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < eef71c01deb08547956df3634a0d34c6bdbcecb8`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < c9acbe38797bc1aa3c22a1ab72452e210af6e0ff`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < 6b068a97958aa00a901a9b5083d74114b21f7b66`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < bb63a0530e8e6de3aaf29cd5ba487db2490128ef`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < ba33b4f9d3423accd2c91a0b0b0680cd589922f2`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < 4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723`
- `Linux >= 1a339b658d9dbe1471f67b78237cf8fa08bbbeb5 < c0c9cfb3b75def8bf200a2d4db09015806acfeaf`
- `Linux cd4ae0b05126cc9461a2e50ccb745e5583cc91e2`
- `Linux cf503dbe5c22c6ab9797e1cf864a11597d711c3a`
- `Linux d229e7ecc0cb29996688f0fa98c5eb6128b81e3a`
- `Linux >= 4.9.128 < 4.10`
- `Linux >= 4.14.71 < 4.15`
- `Linux >= 4.18.9 < 4.19`
- `Linux 4.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.