Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f2219745250f388edacabe6cca73654131c67d0a to < cc86227fea28aed86c1fb52a884560b4440da198affectedf2219745250f388edacabe6cca73654131c67d0a to < b020b447338872440142fe8a57350a483da86b7aaffectedf2219745250f388edacabe6cca73654131c67d0a to < 3fd487c69ad3161e358c33c170bab0cf02a071b7affectedf2219745250f388edacabe6cca73654131c67d0a to < 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348affectedf2219745250f388edacabe6cca73654131c67d0a to < 9ddbc5f4bb498aff8096a5231574858a4bffee4faffectedf2219745250f388edacabe6cca73654131c67d0a to < 134825dfc971fbf2b1d0f58f0b3bce8332ad0afbaffectedf2219745250f388edacabe6cca73654131c67d0a to < 114f00d738f15dd8c7318369edcdc53dd6d08763affected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/cc86227fea28aed86c1fb52a884560b4440da198 ↗
- https://git.kernel.org/stable/c/b020b447338872440142fe8a57350a483da86b7a ↗
- https://git.kernel.org/stable/c/3fd487c69ad3161e358c33c170bab0cf02a071b7 ↗
- https://git.kernel.org/stable/c/5afa57ea91481c6c49f194b0f5a5c4d96a4d7348 ↗
- https://git.kernel.org/stable/c/9ddbc5f4bb498aff8096a5231574858a4bffee4f ↗
- https://git.kernel.org/stable/c/134825dfc971fbf2b1d0f58f0b3bce8332ad0afb ↗
- https://git.kernel.org/stable/c/114f00d738f15dd8c7318369edcdc53dd6d08763 ↗