NACK: [SRU][R][PATCH 0/1] Fix TPM2 key creation commands time out on some Infineon modules
Ivan Hu
ivan.hu at canonical.com
Wed Jul 1 08:22:08 UTC 2026
The author/committer mess up by AI.
On Wed, Jul 1, 2026 at 3:54 PM AceLan Kao <ivan.hu at canonical.com> wrote:
> BugLink: https://bugs.launchpad.net/bugs/2158883
>
> [Impact]
> TPM2 key creation commands time out on and off on some Intel platforms
> that use Infineon SLB9670 and SLB9672 TPM modules.
>
> A recent change cut the timeout for the key creation commands
> (CREATE_PRIMARY, CREATE, CREATE_LOADED) from 300 seconds down to 30
> seconds. On affected hardware these commands sometimes take longer than
> 30 seconds, so they fail with a timeout. The failures show up a few
> times across hundreds of test runs.
>
> This affects the in-kernel TPM path, so anything that creates TPM keys
> (measured boot, key sealing, fwts/checkbox TPM tests) can hit it.
>
> [Fix]
> Restore the timeout for the three key creation commands back to 300
> seconds.
>
> Upstream commit:
> de59d78e64039baa5fed455ddb905ba8263e7ede
> ("tpm: restore timeout for key creation commands")
>
> This reverts the timeout regression from:
> 207696b17f38 ("tpm: use a map for tpm2_calc_ordinal_duration()")
> which is in v6.19-rc6.
>
> [Test Plan]
> On affected hardware with tpm2-tools installed, create a primary key
> many times:
>
> $ sudo tpm2_createprimary -C o -g sha256 -G rsa4096 -c /tmp/prim.ctx
>
> Without patch: some runs fail, shows TPM command timeout errors for the
> create commands.
> With patch: all runs pass, no TPM timeout errors.
>
> [Where problems could occur]
> This touches the TPM2 command duration table in the tpm driver.
> The change only raises the allowed wait time, so it does not change
> command behavior.
>
> Baoli Zhang (1):
> tpm: restore timeout for key creation commands
>
> drivers/char/tpm/tpm2-cmd.c | 6 +++---
> 1 file changed, 3 insertions(+), 3 deletions(-)
>
> --
> 2.53.0
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20260701/a7b8b6e0/attachment.html>
More information about the kernel-team
mailing list