CVE-2026-72152

A flaw was found in the Linux kernel's Trusted Platform Module (TPM) TIS SPI driver. The wait_event_interruptible_timeout() function incorrectly evaluates its condition after setting the task state, which can trigger a warning when debugging atomic sleeps and using the Interrupt Request (IRQ) wait path. This could potentially lead to system instability or unexpected behavior. The issue has been resolved by implementing proper task state handling and using wait_woken() for changes.

This vulnerability is rated as a Low severity flaw for Red Hat Enterprise Linux because it requires local access and only affects hardware equipped with SPI-connected TPM modules. Typical enterprise platforms rely on LPC or CRB interfaces rather than SPI buses, leaving most default installations unexposed. Furthermore, the issue primarily surfaces under specific diagnostic configurations not enabled by default in production kernels, limiting potential impact to localized kernel warnings or minor operational delays.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.