https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:46:09 +0000 https://vulnerability.circl.lu/vuln/cve-2025-68792 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tpm2-sessions: Fix out of range indexing in name_size</p> <p>&#39;name_size&#39; does not have any range checks, and it just directly indexes with TPM_ALG_ID, which could lead into memory corruption at worst.</p> <p>Address the issue by only processing known values and returning -EINVAL for unrecognized values.</p> <p>Make also &#39;tpm_buf_append_name&#39; and &#39;tpm_buf_fill_hmac_session&#39; fallible so that errors are detected before causing any spurious TPM traffic.</p> <p>End also the authorization session on failure in both of the functions, as the session state would be then by definition corrupted.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tpm2-sessions: Fix out of range indexing in name_size</p> <p>&#39;name_size&#39; does not have any range checks, and it just directly indexes with TPM_ALG_ID, which could lead into memory corruption at worst.</p> <p>Address the issue by only processing known values and returning -EINVAL for unrecognized values.</p> <p>Make also &#39;tpm_buf_append_name&#39; and &#39;tpm_buf_fill_hmac_session&#39; fallible so that errors are detected before causing any spurious TPM traffic.</p> <p>End also the authorization session on failure in both of the functions, as the session state would be then by definition corrupted.</p> https://vulnerability.circl.lu/vuln/cve-2025-68792