Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f2219745250f388edacabe6cca73654131c67d0a to < 3fd7df4636d8fd5e3592371967a5941204368936affectedf2219745250f388edacabe6cca73654131c67d0a to < af0689cafb127a8d1af78cc8b72585c9b2a19ecdaffectedf2219745250f388edacabe6cca73654131c67d0a to < 19166de9737218b77122c41a5730ac87025e089faffectedf2219745250f388edacabe6cca73654131c67d0a to < 9b015f2918b95bdde2ca9cefa10ef02b138aae1eaffectedf2219745250f388edacabe6cca73654131c67d0a to < 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1affectedf2219745250f388edacabe6cca73654131c67d0a to < 62cd5d480b9762ce70d720a81fa5b373052ae05faffected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.198 to ≤ 5.15.*unaffected6.1.160 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.64 to ≤ 6.12.*unaffected6.18.3 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3fd7df4636d8fd5e3592371967a5941204368936 ↗
- https://git.kernel.org/stable/c/af0689cafb127a8d1af78cc8b72585c9b2a19ecd ↗
- https://git.kernel.org/stable/c/19166de9737218b77122c41a5730ac87025e089f ↗
- https://git.kernel.org/stable/c/9b015f2918b95bdde2ca9cefa10ef02b138aae1e ↗
- https://git.kernel.org/stable/c/9e7c63c69f57b1db1a8a1542359a6167ff8fcef1 ↗
- https://git.kernel.org/stable/c/62cd5d480b9762ce70d720a81fa5b373052ae05f ↗