Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-36967

KEYS: trusted: Fix memory leak in tpm2_key_encode()

Description

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by calling kfree() in the success, and in the error case.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f2219745250f388edacabe6cca73654131c67d0a to < 1e6914fa8e7798bcf3ce4a5b96ea4ac1d5571cdfaffected
  • f2219745250f388edacabe6cca73654131c67d0a to < 5d91238b590bd883c86ba7707c5c9096469c08b7affected
  • f2219745250f388edacabe6cca73654131c67d0a to < e62835264d0352be6086975f18fdfed2b5520b13affected
  • f2219745250f388edacabe6cca73654131c67d0a to < 189c768932d435045b1fae12bf63e53866f06a28affected
  • f2219745250f388edacabe6cca73654131c67d0a to < cf26a92f560eed5d6ddc3d441cc645950cbabc56affected
  • f2219745250f388edacabe6cca73654131c67d0a to < ffcaa2172cc1a85ddb8b783de96d38ca8855e248affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.160 to ≤ 5.15.*unaffected
  • 6.1.92 to ≤ 6.1.*unaffected
  • 6.6.32 to ≤ 6.6.*unaffected
  • 6.8.11 to ≤ 6.8.*unaffected
  • 6.9.2 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References