CVE-2024-42255

tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()

published August 8, 2024

CVSS
—
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()

Dereference auth after NULL check in tpm_buf_check_hmac_response().

Otherwise, unless tpm2_sessions_init() was called, a call can cause NULL

dereference, when TCG_TPM2_HMAC is enabled.

[jarkko: adjusted the commit message.]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.5th percentile
Published
2024-08-08T08:49Z
EPSS history
Timeline
  • 08 AUG 08:49Z
    tpm: Use auth only after NULL check in tpm_buf_check_hmac_response()
    cvelistv5