KEYS: trusted: Fix a memory leak in tpm2_load_cmd
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.198, 6.1.160, 6.6.120, 6.12.64, 6.18.3
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From f2219745250f388edacabe6cca73654131c67d0a · fixed in 3fd7df4636d8fd5e3592371967a5941204368936; From f2219745250f388edacabe6cca73654131c67d0a · fixed in af0689cafb127a8d1af78cc8b72585c9b2a19ecd; From f2219745250f388edacabe6cca73654131c67d0a · fixed in 19166de9737218b77122c41a5730ac87025e089f; From f2219745250f388edacabe6cca73654131c67d0a · fixed in 9b015f2918b95bdde2ca9cefa10ef02b138aae1e; From f2219745250f388edacabe6cca73654131c67d0a · fixed in 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1; From f2219745250f388edacabe6cca73654131c67d0a · fixed in 62cd5d480b9762ce70d720a81fa5b373052ae05f
- Linux Linux
5.13
- KernelLinux
From 5.13.0 · fixed in 5.15.198; From 5.16.0 · fixed in 6.1.160; From 6.2.0 · fixed in 6.6.120; From 6.7.0 · fixed in 6.12.64; From 6.13.0 · fixed in 6.18.3