In the Linux kernel, the following vulnerability has been resolved:
tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
The TPM SPI transfer mechanism uses MAX_SPI_FRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account for the 4 bytes of header that prepends the SPI data frame. This can result in out-of-bounds accesses and was confirmed with KASAN.
Introduce SPI_HDRSIZE to account for the header and use to allocate the transfer buffer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-exynos | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-45-generic | Sep 12, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub