Riskcovery

CVE-2024-42255

tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()

State
Published
Severity
Not scored
Published
Aug 8, 2024
Updated
May 11, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()

Dereference auth after NULL check in tpm_buf_check_hmac_response(). Otherwise, unless tpm2_sessions_init() was called, a call can cause NULL dereference, when TCG_TPM2_HMAC is enabled.

[jarkko: adjusted the commit message.]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7ca110f2679b7d1f3ac1afc90e6ffbf0af3edf0d to before b9afbb9a0c734197c59c43610071041044bf1562Affected
  • 7ca110f2679b7d1f3ac1afc90e6ffbf0af3edf0d to before 7dc357d343f134bf59815ff6098b93503ec8a23bAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.10.1 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.