What’s Vulnerable › Vulnerabilities

CVE-2026-80930: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-11 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the function returns without balancing the enable_irq() call. Disable the IRQ before leaving the failed wait path. Also preserve an interrupted wait's original error code instead of converting it to -ETIMEDOUT inside the helper.

Affected products

• Linux kernel: 3.13 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/007c9e637e0e0b9d946b7f0e8a42f1f1aca48d7a
• https://git.kernel.org/stable/c/07c2544a47da481043e945322b1bef71cdd7af79
• https://git.kernel.org/stable/c/2c9147b2c0d75091ab451c2461d1c91788a7e60b
• https://git.kernel.org/stable/c/705c4ed0643366963547b2616d53165f2519c81f
• https://git.kernel.org/stable/c/73e89faee1f9b9119fa70b679058b045168ae633
• https://git.kernel.org/stable/c/aee2296d09f6aeff41db369c6fd2dcaea3ee302c
• https://git.kernel.org/stable/c/b0dc3f18af01ba9f157b7d810cb22d3752d244ef
• https://git.kernel.org/stable/c/cde2d927c29e82380851f209222256c607969a1f

Get alerted when CVE-2026-80930 or the next vulnerability affects your stack