Linux Kernel TPM Operations Race Condition Vulnerability

A vulnerability in the Linux kernel's TPM (Trusted Platform Module) handling has been identified, specifically within the TPM 2.0 operations. The issue arises from a race condition related to the management of TPM spaces, which can lead to a null pointer dereference. This vulnerability was introduced during a series of changes aimed at removing nested TPM operations, where the proper synchronization was overlooked in certain functions. Although the flaw is typically brief and occurs only under specific circumstances, there have been reports of it being exploited in practice.

Impact

Exploitation of this vulnerability can cause a null pointer dereference, leading to a crash of the affected system or application.