The Linux kernel’s TPM TIS SPI driver had an issue in the way it waits for TPM status: it used wait_event_interruptible_timeout, which evaluates its predicate only after the task state was set to TASK_INTERRUPTIBLE. When CONFIG_DEBUG_ATOMIC_SLEEP is enabled, this triggers a warning path that involves the IRQ wait and a mutex lock on the SPI bus. The patch replaces that waiting logic with a call to wait_tpm_stat_cond only while the task is running and uses wait_woken to sleep for status changes. The official description does not mention code execution or privilege escalation; the effect is limited to kernel warnings and, potentially, transient instability. Based on the description, the patch is intended to eliminate the warning and to prevent the possibility of an unintended blocking loop.

Affected systems are all Linux kernel installations that include the legacy TPM TIS SPI driver. The CPE string cpe:2.3:o:linux:linux_kernel:* indicates that any Linux kernel is potentially vulnerable until the driver patch is applied.

The CVSS score of 5.5 and an EPSS score of < 1 % indicate moderate severity with a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector requires a TPM operation that triggers the problematic wait logic; no path to code execution or privilege escalation is described. The impact is limited to kernel warnings and possible temporary instability, rather than data loss or more serious compromise.