CVE-2026-80930

Received Received - Intake

TPM I2C Nuvoton Kernel IRQ Timeout Vulnerability

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the function returns without balancing the enable_irq() call. Disable the IRQ before leaving the failed wait path. Also preserve an interrupted wait's original error code instead of converting it to -ETIMEDOUT inside the helper.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-80930

EUVD

EUVD-2026-76253

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's TPM (Trusted Platform Module) I2C driver for Nuvoton chips. The issue occurs in the i2c_nuvoton_wait_for_stat() function, which enables an interrupt request (IRQ) before waiting for a status change. If the wait times out or is interrupted before the handler runs, the function returns without properly disabling the IRQ, leading to an unbalanced IRQ state.

Detection Guidance

This vulnerability is specific to the Linux kernel's TPM I2C driver (tpm_i2c_nuvoton). Detection requires checking kernel logs for related errors or examining the driver's behavior during TPM operations. No direct commands are provided in the context, but monitoring kernel messages with 'dmesg' or 'journalctl -k' may reveal issues.

Impact Analysis

This vulnerability could cause system instability or crashes due to unbalanced IRQ handling. It may lead to interrupt-related errors, reduced system performance, or unexpected behavior in applications relying on TPM functionality, such as secure boot or cryptographic operations.

Mitigation Strategies

Apply the latest Linux kernel updates to ensure the patched version of the tpm_i2c_nuvoton driver is installed. Reboot the system after updating to activate the fix. If immediate patching is not possible, consider disabling the affected TPM I2C interface if not required.

Hi! I’m here to help you understand CVE-2026-80930. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70