{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"45ceeb08bf1f4f7353ffb529d8682a0cf5506318","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"eef71c01deb08547956df3634a0d34c6bdbcecb8","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"c9acbe38797bc1aa3c22a1ab72452e210af6e0ff","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"6b068a97958aa00a901a9b5083d74114b21f7b66","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"bb63a0530e8e6de3aaf29cd5ba487db2490128ef","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"ba33b4f9d3423accd2c91a0b0b0680cd589922f2","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"lessThan":"c0c9cfb3b75def8bf200a2d4db09015806acfeaf","status":"affected","version":"1a339b658d9dbe1471f67b78237cf8fa08bbbeb5","versionType":"git"},{"status":"affected","version":"cd4ae0b05126cc9461a2e50ccb745e5583cc91e2","versionType":"git"},{"status":"affected","version":"cf503dbe5c22c6ab9797e1cf864a11597d711c3a","versionType":"git"},{"status":"affected","version":"d229e7ecc0cb29996688f0fa98c5eb6128b81e3a","versionType":"git"},{"lessThan":"4.10","status":"affected","version":"4.9.128","versionType":"semver"},{"lessThan":"4.15","status":"affected","version":"4.14.71","versionType":"semver"},{"lessThan":"4.19","status":"affected","version":"4.18.9","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.19"},{"lessThan":"4.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.266","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.217","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72152","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()\n\nwait_event_interruptible_timeout() evaluates its condition after setting\nthe current task state to TASK_INTERRUPTIBLE.\n\nWith CONFIG_DEBUG_ATOMIC_SLEEP this triggers a warning when the IRQ wait\npath is used:\n\n    tpm_tis_status()\n      tpm_tis_spi_read_bytes()\n        tpm_tis_spi_transfer_full()\n          spi_bus_lock()\n            mutex_lock()\n\nAddress this with the following measures:\n\n1. Call wait_tpm_stat_cond() only while tasking is running.\n2. Use wait_woken() to wait for changes.","epss":{"date":"2026-11-06","percentile":0.12139,"score":0.00216},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985578207,"publishedAt":1786773202951,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/45ceeb08bf1f4f7353ffb529d8682a0cf5506318"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/eef71c01deb08547956df3634a0d34c6bdbcecb8"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c9acbe38797bc1aa3c22a1ab72452e210af6e0ff"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6b068a97958aa00a901a9b5083d74114b21f7b66"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/bb63a0530e8e6de3aaf29cd5ba487db2490128ef"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ba33b4f9d3423accd2c91a0b0b0680cd589922f2"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c0c9cfb3b75def8bf200a2d4db09015806acfeaf"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/45ceeb08bf1f4f7353ffb529d8682a0cf5506318"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/4bb3e1bc142dc9c3240ceed1b3ab031aa9cb1723"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/6b068a97958aa00a901a9b5083d74114b21f7b66"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/ba33b4f9d3423accd2c91a0b0b0680cd589922f2"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/bb63a0530e8e6de3aaf29cd5ba487db2490128ef"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c0c9cfb3b75def8bf200a2d4db09015806acfeaf"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c9acbe38797bc1aa3c22a1ab72452e210af6e0ff"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/eef71c01deb08547956df3634a0d34c6bdbcecb8"}],"remediation":[],"revision":"6642db942440d5dae4d94191e2ecfc43cc2b4425421492496e81f95f72b093ca","sources":[{"modifiedAt":1793984121086,"name":"CNA: Linux","retrievedAt":1793986053712,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72152"},{"modifiedAt":1793985578207,"name":"NVD","retrievedAt":1793989690608,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72152"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986078125,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72152"}],"ssvc":{"assessedAt":1793983924110,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()","updatedAt":1793989690608}