CVE-2026-72152

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

wait_event_interruptible_timeout() evaluates its condition after setting

the current task state to TASK_INTERRUPTIBLE.

With CONFIG_DEBUG_ATOMIC_SLEEP this triggers a warning when the IRQ wait

path is used:

tpm_tis_status()

tpm_tis_spi_read_bytes()

tpm_tis_spi_transfer_full()

spi_bus_lock()

mutex_lock()

Address this with the following measures:

1. Call wait_tpm_stat_cond() only while tasking is running.

2. Use wait_woken() to wait for changes.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References