cbcvebase.
CVE-2021-46922
published 2024-02-27

CVE-2021-46922: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM reservation for seal/unseal The original patch 8c657a0590de ("KEYS…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.2th percentile
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM reservation for seal/unseal The original patch 8c657a0590de ("KEYS: trusted: Reserve TPM for seal and unseal operations") was correct on the mailing list: https://lore.kernel.org/linux-integrity/[email protected]/ But somehow got rebased so that the tpm_try_get_ops() in tpm2_seal_trusted() got lost. This causes an imbalanced put of the TPM ops and causes oopses on TIS based hardware. This fix puts back the lost tpm_try_get_ops()

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.38-1 (bookworm)linux 5.10.38-1 (bookworm)
linuxlinux>= 498b8fc1cdc13b57b02dd28544b18323900fae10 < 39c8d760d44cb3fa0d67e8cd505df81cf4d8099939c8d760d44cb3fa0d67e8cd505df81cf4d80999
linuxlinux>= 5.10.20 < 5.10.335.10.33
linuxlinux>= 5.11.3 < 5.11.175.11.17
linuxlinux>= 67118bb78d72aab5b831f054a74ae856339a1974 < bf84ef2dd2ccdcd8f2658476d34b51455f970ce4bf84ef2dd2ccdcd8f2658476d34b51455f970ce4
linuxlinux>= 8c657a0590de585b1115847c17b34a58025f2f4b < 9d5171eab462a63e2fbebfccf6026e92be018f209d5171eab462a63e2fbebfccf6026e92be018f20
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 5.10.20 < 5.10.335.10.33
linuxlinux_kernel>= 5.11.3 < 5.11.175.11.17

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.