447 matches found
CVE-2025-71147
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2loadcmd 'tpm2loadcmd' allocates a tempoary blob indirectly via 'tpm2keydecode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper...
Azure Linux 3.0 Security Update: kernel (CVE-2024-36967)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36967 advisory. - In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in...
MiracleLinux 8 : tpm2-tools-4.1.1-5.el8 (AXSA:2021-2806:03)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2806:03 advisory. tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 9 : tpm2-tools-5.2-4.el9 (AXSA:2024-9175:01)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-9175:01 advisory. tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the attest...
MiracleLinux 8 : tpm2-tss-2.3.2-5.el8 (AXSA:2023-7284:03)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-7284:03 advisory. tpm2-tss: Buffer Overlow in TSS2RCDecode CVE-2023-22745 Tenable has extracted the preceding description block directly from the MiracleLinux security advisor...
MiracleLinux 9 : tpm2-tss-3.2.2-2.el9 (AXSA:2023-6873:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6873:02 advisory. tpm2-tss: Buffer Overlow in TSS2RCDecode CVE-2023-22745 Tenable has extracted the preceding description block directly from the MiracleLinux security advisor...
SUSE CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
CVE-2025-68792
An out-of-bounds array indexing flaw was found in the Linux kernel's TPM2 session handling code. The namesize lookup function uses TPMALGID values directly as array indices without bounds checking. An unrecognized algorithm ID could cause out-of-bounds memory access, potentially leading to memory...
CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
UBUNTU-CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
CVE-2025-68792
CVE-2025-68792 affects the Linux kernel where tpm2-sessions has an out-of-range indexing issue in name_size due to missing range checks on TPM_ALG_ID. This could lead to memory corruption in extreme cases. The mitigated fix processes only known values, returns -EINVAL for unrecognized values, and...
CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
Linux Distros Unpatched Vulnerability : CVE-2025-68792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range...
CVE-2022-50824 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtis: Add the missed acpiputtable to fix memory leak In checkacpitpm2, we get the TPM2 table just to make sure the table is there, not used after the init, so the acpiputtable should be added to release the ACPI memory...
CVE-2023-22745 affecting package tpm2-tss for versions less than 4.0.1-1
CVE-2023-22745 affecting package tpm2-tss for versions less than 4.0.1-1. A patched version of the package is available...
Fedora: Security Advisory (FEDORA-2025-6dd003943f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2020-17175
Malware in sbrugna...