{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80930", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.802Z", "datePublished": "2026-09-11T19:42:05.528Z", "dateUpdated": "2026-09-11T19:42:05.528Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:42:05.528Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_i2c_nuvoton: disable IRQ on wait timeout\n\ni2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the\ninterrupt handler to report a status change. If the wait times out, or is\ninterrupted before the handler runs, the function returns without\nbalancing the enable_irq() call.\n\nDisable the IRQ before leaving the failed wait path. Also preserve an\ninterrupted wait's original error code instead of converting it to\n-ETIMEDOUT inside the helper."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/char/tpm/tpm_i2c_nuvoton.c"], "versions": [{"version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "lessThan": "73e89faee1f9b9119fa70b679058b045168ae633", "status": "affected", "versionType": "git"}, {"version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "lessThan": "cde2d927c29e82380851f209222256c607969a1f", "status": "affected", "versionType": "git"}, {"version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "lessThan": "aee2296d09f6aeff41db369c6fd2dcaea3ee302c", "status": "affected", "versionType": "git"}, {"version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "lessThan": "705c4ed0643366963547b2616d53165f2519c81f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/char/tpm/tpm_i2c_nuvoton.c"], "versions": [{"version": "3.13", "status": "affected"}, {"version": "0", "lessThan": "3.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.109", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "6.12.109"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.13", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/73e89faee1f9b9119fa70b679058b045168ae633"}, {"url": "https://git.kernel.org/stable/c/cde2d927c29e82380851f209222256c607969a1f"}, {"url": "https://git.kernel.org/stable/c/aee2296d09f6aeff41db369c6fd2dcaea3ee302c"}, {"url": "https://git.kernel.org/stable/c/705c4ed0643366963547b2616d53165f2519c81f"}], "title": "tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/char/tpm/tpm_i2c_nuvoton.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "73e89faee1f9b9119fa70b679058b045168ae633", "status": "affected", "version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "versionType": "git"}, {"lessThan": "cde2d927c29e82380851f209222256c607969a1f", "status": "affected", "version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "versionType": "git"}, {"lessThan": "aee2296d09f6aeff41db369c6fd2dcaea3ee302c", "status": "affected", "version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "versionType": "git"}, {"lessThan": "705c4ed0643366963547b2616d53165f2519c81f", "status": "affected", "version": "4c336e4b1556f4b722ba597bc6e3df786968a600", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/char/tpm/tpm_i2c_nuvoton.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.13"}, {"lessThan": "3.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.109", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_i2c_nuvoton: disable IRQ on wait timeout\n\ni2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the\ninterrupt handler to report a status change. If the wait times out, or is\ninterrupted before the handler runs, the function returns without\nbalancing the enable_irq() call.\n\nDisable the IRQ before leaving the failed wait path. Also preserve an\ninterrupted wait's original error code instead of converting it to\n-ETIMEDOUT inside the helper."}], "id": "CVE-2026-80930", "lastModified": "2026-09-11T20:18:56.767", "metrics": {}, "published": "2026-09-11T20:18:56.767", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/705c4ed0643366963547b2616d53165f2519c81f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/73e89faee1f9b9119fa70b679058b045168ae633"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aee2296d09f6aeff41db369c6fd2dcaea3ee302c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cde2d927c29e82380851f209222256c607969a1f"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: TPM I2C Nuvoton driver resource management vulnerability", "id": "2532134", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532134"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in the Linux kernel's TPM I2C Nuvoton driver. The `i2c_nuvoton_wait_for_stat()` function enables an interrupt (IRQ) but fails to disable it if the wait operation times out or is interrupted. This oversight can lead to an unbalanced IRQ state, potentially causing system instability or resource exhaustion, which could result in a Denial of Service (DoS)."], "name": "CVE-2026-80930", "public_date": "2026-09-11T19:42:05Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-80930\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-80930\nhttps://git.kernel.org/stable/c/705c4ed0643366963547b2616d53165f2519c81f\nhttps://git.kernel.org/stable/c/73e89faee1f9b9119fa70b679058b045168ae633\nhttps://git.kernel.org/stable/c/aee2296d09f6aeff41db369c6fd2dcaea3ee302c\nhttps://git.kernel.org/stable/c/cde2d927c29e82380851f209222256c607969a1f"], "threat_severity": "Moderate"}

{}