Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-42255

tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: Use auth only after NULL check in tpm_buf_check_hmac_response() Dereference auth after NULL check in tpm_buf_check_hmac_response(). Otherwise, unless tpm2_sessions_init() was called, a call can cause NULL dereference, when TCG_TPM2_HMAC is enabled. [jarkko: adjusted the commit message.]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7ca110f2679b7d1f3ac1afc90e6ffbf0af3edf0d to < b9afbb9a0c734197c59c43610071041044bf1562affected
  • 7ca110f2679b7d1f3ac1afc90e6ffbf0af3edf0d to < 7dc357d343f134bf59815ff6098b93503ec8a23baffected

Linux Linux

Default version status: affected

  • 6.10affected
  • 0 to < 6.10unaffected
  • 6.10.1 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References