Riskcovery

CVE-2026-98221

KEYS: trusted: Fix tpm2_load_cmd() boundary check

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix tpm2_load_cmd() boundary check

tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f2219745250f388edacabe6cca73654131c67d0a to before cc86227fea28aed86c1fb52a884560b4440da198Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before b020b447338872440142fe8a57350a483da86b7aAffected
  • f2219745250f388edacabe6cca73654131c67d0a to before 3fd487c69ad3161e358c33c170bab0cf02a071b7Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348Affected
  • f2219745250f388edacabe6cca73654131c67d0a to before 9ddbc5f4bb498aff8096a5231574858a4bffee4fAffected
  • f2219745250f388edacabe6cca73654131c67d0a to before 134825dfc971fbf2b1d0f58f0b3bce8332ad0afbAffected
  • f2219745250f388edacabe6cca73654131c67d0a to before 114f00d738f15dd8c7318369edcdc53dd6d08763Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.222 through 5.15.*Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.