In the Linux kernel, the following vulnerability has been resolved:
tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()
tpm2_read_public() calls tpm_buf_init() but fails to call tpm_buf_destroy() on two exit paths, leaking a page allocation:
1. When name_size() returns an error (unrecognized hash algorithm), the function returns directly without destroying the buffer.
2. On the success path, the buffer is never destroyed before returning.
All other error paths in the function correctly call tpm_buf_destroy() before returning.
Fix both by adding the missing tpm_buf_destroy() calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade python3-perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade perf6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18Upgrade kernel-livepatch-6.18.30-61.116Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade kernel6.18-develUpgrade kernel6.18-tools-develUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools | Jul 8, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-oem-24.04dUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-26.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-ibmUpgrade linux-image-azure-7.0Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-7.0Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-oem-24.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-realtime-7.0Upgrade linux-image-azureUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-realtime-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-nvidia-7.0Upgrade linux-image-realtime | Jul 1, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub