Information Disclosure

2020-04-1001:08:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

kernel

vulnerability

tpm_read()

memory handling

security-related data

local user

unprivileged

tpm command

EPSS

Percentile

5.1%

JSON

kernel is vulnerable to information disclosure. The vulnerability exists through a flaw in the way memory containing security-related data was handled in tpm_read() could allow a local, unprivileged user to read the results of a previously run TPM command.