CVE-2026-98221

CVE-2026-98221

published October 6, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix tpm2_load_cmd() boundary check

tpm2_load_cmd() does boundary checks against the ASN.1 size i.e.,

payload->blob_len. Address this by passing the decoded blob size to

tpm2_load_cmd(), and use it for the boundary checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-10-06T13:18Z
References (7)
https://git.kernel.org/stable/c/114f00d738f15dd8c7318369edcdc53dd6d08763 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/134825dfc971fbf2b1d0f58f0b3bce8332ad0afb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3fd487c69ad3161e358c33c170bab0cf02a071b7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5afa57ea91481c6c49f194b0f5a5c4d96a4d7348 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9ddbc5f4bb498aff8096a5231574858a4bffee4f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b020b447338872440142fe8a57350a483da86b7a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cc86227fea28aed86c1fb52a884560b4440da198 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 07 OCT 03:43Z
    EPSS moved — → 0%
    epss
  • 06 OCT 08:44Z
    KEYS: trusted: Fix tpm2_load_cmd() boundary check
    cvelistv5