Riskcovery

CVE-2021-46922

KEYS: trusted: Fix TPM reservation for seal/unseal

State
Published
Severity
7.8 High
Published
Feb 27, 2024
Updated
Aug 5, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix TPM reservation for seal/unseal

The original patch 8c657a0590de ("KEYS: trusted: Reserve TPM for seal and unseal operations") was correct on the mailing list:

https://lore.kernel.org/linux-integrity/20210128235621.127925-4-jarkko@kernel.org/

But somehow got rebased so that the tpm_try_get_ops() in tpm2_seal_trusted() got lost. This causes an imbalanced put of the TPM ops and causes oopses on TIS based hardware.

This fix puts back the lost tpm_try_get_ops()

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 67118bb78d72aab5b831f054a74ae856339a1974 to before bf84ef2dd2ccdcd8f2658476d34b51455f970ce4Affected
  • 498b8fc1cdc13b57b02dd28544b18323900fae10 to before 39c8d760d44cb3fa0d67e8cd505df81cf4d80999Affected
  • 8c657a0590de585b1115847c17b34a58025f2f4b to before 9d5171eab462a63e2fbebfccf6026e92be018f20Affected
LinuxLinux
  • 5.10.20 to before 5.10.33Affected
  • 5.11.3 to before 5.11.17Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.