Riskcovery

CVE-2024-36967

KEYS: trusted: Fix memory leak in tpm2_key_encode()

State
Published
Severity
Not scored
Published
Jun 8, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix memory leak in tpm2_key_encode()

'scratch' is never freed. Fix this by calling kfree() in the success, and in the error case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f2219745250f388edacabe6cca73654131c67d0a to before 1e6914fa8e7798bcf3ce4a5b96ea4ac1d5571cdfAffected
  • f2219745250f388edacabe6cca73654131c67d0a to before 5d91238b590bd883c86ba7707c5c9096469c08b7Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before e62835264d0352be6086975f18fdfed2b5520b13Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before 189c768932d435045b1fae12bf63e53866f06a28Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before cf26a92f560eed5d6ddc3d441cc645950cbabc56Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before ffcaa2172cc1a85ddb8b783de96d38ca8855e248Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.160 through 5.15.*Not affected
  • 6.1.92 through 6.1.*Not affected
  • 6.6.32 through 6.6.*Not affected
  • 6.8.11 through 6.8.*Not affected
  • 6.9.2 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.