CVE-2026-46096

🗓️ 27 May 2026 12:58:56Reported by LinuxType

Fix missing tpm_buf_destroy in tpm2_read_public to prevent buffer leak in two exit paths.

Reporter	Title	Published	Views	Family All 176
ATTACKERKB	CVE-2026-46096	27 May 202612:58	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1754)	27 May 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-46096	27 May 202600:00	–	nessus
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
Cvelist	CVE-2026-46096 tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()	27 May 202612:58	–	cvelist
Debian CVE	CVE-2026-46096	27 May 202612:58	–	debiancve
EUVD	EUVD-2026-32479	27 May 202612:58	–	euvd
NVD	CVE-2026-46096	27 May 202614:17	–	nvd
OPENSUSE Linux	kernel-devel-7.0.11-1.1 on GA media (moderate)	8 Jun 202600:00	–	opensuse
OSV	BELL-CVE-2026-46096	29 May 202606:10	–	osv

Vulners

CNA

Node

linux linux_kernelRange6.18.3–6.18.27

linux linux_kernelRange6.12.64–6.13

linux linux_kernelRange6.19–6.18.27

linux linux_kernelRange6.19.0–7.0.4

linux linux_kernelRange7.1.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/char/tpm/tpm2-sessions.c"
    ],
    "versions": [
      {
        "version": "20eda7c74b69fe9e1caf9b930a5c016bf8d755fa",
        "lessThan": "f8775d9d9062da662cc861f9ff7722a65896d4cd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bda1cbf73c6e241267c286427f2ed52b5735d872",
        "lessThan": "2f434be87e256fd58254f60ddf5d7d58e775ca0b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bda1cbf73c6e241267c286427f2ed52b5735d872",
        "lessThan": "f0f75a3d98b7959a8677b6363e23190f3018636b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a3b7eb67225c486a2da357c5db3e386f4e64bcde",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "6.18.3",
        "lessThan": "6.18.27",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.12.64",
        "lessThan": "6.13",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/char/tpm/tpm2-sessions.c"
    ],
    "versions": [
      {
        "version": "6.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.27",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.4",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f8775d9d9062da662cc861f9ff7722a65896d4cd
git	www.git.kernel.org/stable/c/2f434be87e256fd58254f60ddf5d7d58e775ca0b
git	www.git.kernel.org/stable/c/f0f75a3d98b7959a8677b6363e23190f3018636b

17 Jun 2026 10:53Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.00166