UnratedFix available
tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the function returns without balancing the enable_irq() call. Disable the IRQ before leaving the failed wait path. Also preserve an interrupted wait's original error code instead of converting it to -ETIMEDOUT inside the helper.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.270, 5.15.221, 6.1.188, 6.12.109, 6.18.50, 6.6.157, 7.2.4
- CVEs
- CVE-2026-80930
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 6 Nov 2026, 02:43 UTC · Revision 1
Source evidence
tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
core-osv · Original sourcePublished 11 Sept 2026, 19:42 UTC
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the function returns without balancing the enable_irq() call. Disable the IRQ before leaving the failed wait path. Also preserve an interrupted wait's original error code instead of converting it to -ETIMEDOUT inside the helper.
osv:CVE-2026-80930
Kernel
Fixed versions: 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109, 6.18.50, 7.2.4
Complete source record
{
"id": "132a70b305672b989a0efcd302fc4f55abeacc283c4d7ecac8035aed8031649c",
"url": "https://osv.dev/vulnerability/CVE-2026-80930",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout",
"summary": "In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout i2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the function returns without balancing the enable_irq() call. Disable the IRQ before leaving the failed wait path. Also preserve an interrupted wait's original error code instead of converting it to -ETIMEDOUT inside the helper.",
"evidence": "osv:CVE-2026-80930",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.270",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.221",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.188",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.157",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.109",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.50",
"evidence": "/affected/1/ranges"
},
{
"value": "7.2.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-80930",
"aliases": [
"CVE-2026-80930"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4c336e4b1556f4b722ba597bc6e3df786968a600"
},
{
"fixed": "007c9e637e0e0b9d946b7f0e8a42f1f1aca48d7a"
},
{
"fixed": "2c9147b2c0d75091ab451c2461d1c91788a7e60b"
},
{
"fixed": "07c2544a47da481043e945322b1bef71cdd7af79"
},
{
"fixed": "b0dc3f18af01ba9f157b7d810cb22d3752d244ef"
},
{
"fixed": "73e89faee1f9b9119fa70b679058b045168ae633"
},
{
"fixed": "cde2d927c29e82380851f209222256c607969a1f"
},
{
"fixed": "aee2296d09f6aeff41db369c6fd2dcaea3ee302c"
},
{
"fixed": "705c4ed0643366963547b2616d53165f2519c81f"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80930.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.13.0"
},
{
"fixed": "5.10.270"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.221"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.188"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.157"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.109"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.50"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.2.4"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80930.json"
}
}
],
"modified": "2026-10-28T02:30:46.202409708Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/007c9e637e0e0b9d946b7f0e8a42f1f1aca48d7a",
"https://git.kernel.org/stable/c/07c2544a47da481043e945322b1bef71cdd7af79",
"https://git.kernel.org/stable/c/2c9147b2c0d75091ab451c2461d1c91788a7e60b",
"https://git.kernel.org/stable/c/705c4ed0643366963547b2616d53165f2519c81f",
"https://git.kernel.org/stable/c/73e89faee1f9b9119fa70b679058b045168ae633",
"https://git.kernel.org/stable/c/aee2296d09f6aeff41db369c6fd2dcaea3ee302c",
"https://git.kernel.org/stable/c/b0dc3f18af01ba9f157b7d810cb22d3752d244ef",
"https://git.kernel.org/stable/c/cde2d927c29e82380851f209222256c607969a1f",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80930.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80930",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80930.json"
}
},
"related_cves": [
{
"value": "CVE-2026-80930",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 514379,
"published_at": "2026-09-11T19:42:05.528+00:00"
}