In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix tpm2_load_cmd() boundary check
tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade microvm-kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.189-236.399Upgrade kernel-debuginfo | Nov 2, 2026 | Oct 6, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Oct 20, 2026 | Oct 6, 2026 |
| Redhat_linux | — | No solution exists | Oct 13, 2026 | Oct 6, 2026 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-igxUpgrade linux-awsUpgrade linuxUpgrade linux-riscv-7.0Upgrade linux-oem-7.0Upgrade linux-intel-iotgUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-fipsUpgrade linux-azure-fde-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-riscvUpgrade linux-gkeUpgrade linux-gcp-5.15Upgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-ibm-5.15Upgrade linux-hwe-7.0Upgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-realtime | Nov 3, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Oct 6, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub