Vulnerabilities & PatchesEmerging1 src
CVE-2026-89763 - KEYS: trusted: Fix TPM teardown ordering
CVE ID : CVE-2026-89763
Published : Sept. 11, 2026, 8:20 p. m.
• 32 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix TPM teardown ordering
trusted_tpm_exit() drops the TPM chip reference and frees the digest array before unregistering the trusted key type. key_type_lookup() holds key_types_sem for reading until the key operation finishes, while unregister_key_type() takes it for writing. It therefore provides the synchronization point that must precede backend teardown.
The current order permits this interleaving:
CPU 0 CPU 1