High · published February 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix TPM reservation for seal/unseal
The original patch 8c657a0590de ("KEYS: trusted: Reserve TPM for seal
and unseal operations") was correct on the mailing list:
https://lore.kernel.org/linux-integrity/[email protected]/
But somehow got rebased so that the tpm_try_get_ops() in
tpm2_seal_trusted() got lost. This causes an imbalanced put of the
TPM ops and causes oopses on TIS based hardware.
This fix puts back the lost tpm_try_get_ops()
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.10.20, < 5.10.33 | 5.10.33 |
| linux/linux_kernel | ≥ 5.11.3, < 5.11.17 | 5.11.17 |