Re: [PATCH] tpm: Disable TPM on null key name mismatch

From: Jarkko Sakkinen

Date: Thu Sep 24 2026 - 07:24:30 EST


On Fri, Sep 18, 2026 at 06:35:04PM +0000, Gunnar Kudrjavets wrote:
> On Fri, Sep 18, 2026 at 05:39:27AM +0300, Jarkko Sakkinen wrote:
> > On Fri, Sep 18, 2026 at 12:07:31AM +0000, Surendran Kanagaraj wrote:
> > > The null key name check exists to protect against TPM reset attacks, so
> > > a mismatch should stop the device from serving further requests.
> [...]
> > > Set rc to -ENODEV on the mismatch. The error path then disables the chip
> > > and returns the correct code to the caller.
> >
> > Reviewed-by: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
>
> We reviewed this internally as well.
>
> Reviewed-by: Gunnar Kudrjavets <gunnarku@xxxxxxxxxx>
>

Thanks, I added your tag.

Br, Jarkko