Not rated
CVE-2024-49851 In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure…
Description
In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handles being leaked if the device is subsequently closed with no further commands performed. Fix this by flushing the space in the event of command transmission failure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.12 | earliest → < 6.12 | 6.12 |
| Linux 6.11 | earliest → < 6.11.2 | 6.11.2 |
| Linux 6.10 | earliest → < 6.10.13 | 6.10.13 |
| Linux 6.6 | earliest → < 6.6.54 | 6.6.54 |
| Linux 6.1 | earliest → < 6.1.113 | 6.1.113 |
| Linux 5.15 | earliest → < 5.15.168 | 5.15.168 |
| Linux 5.10 | earliest → < 5.10.227 | 5.10.227 |
| Linux 5.4 | earliest → < 5.4.285 | 5.4.285 |
| Linux | 4.12 | No fix stated |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RST2428P 3.2 | earliest → < 3.2 | 3.2 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.2 | earliest → < 3.2 | 3.2 |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.2 | earliest → < 3.2 | 3.2 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1.1 | 1.1.1 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated