Re: [PATCH] tpm: Disable TPM on null key name mismatch

From: Gunnar Kudrjavets

Date: Fri Sep 18 2026 - 14:50:18 EST


On Fri, Sep 18, 2026 at 05:39:27AM +0300, Jarkko Sakkinen wrote:
> On Fri, Sep 18, 2026 at 12:07:31AM +0000, Surendran Kanagaraj wrote:
> > The null key name check exists to protect against TPM reset attacks, so
> > a mismatch should stop the device from serving further requests.
[...]
> > Set rc to -ENODEV on the mismatch. The error path then disables the chip
> > and returns the correct code to the caller.
>
> Reviewed-by: Jarkko Sakkinen <jarkko@xxxxxxxxxx>

We reviewed this internally as well.

Reviewed-by: Gunnar Kudrjavets <gunnarku@xxxxxxxxxx>