https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 01:41:18 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46096 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()</p> <p>tpm2_read_public() calls tpm_buf_init() but fails to call tpm_buf_destroy() on two exit paths, leaking a page allocation:</p> <p>1. When name_size() returns an error (unrecognized hash algorithm), the function returns directly without destroying the buffer.</p> <p>2. On the success path, the buffer is never destroyed before returning.</p> <p>All other error paths in the function correctly call tpm_buf_destroy() before returning.</p> <p>Fix both by adding the missing tpm_buf_destroy() calls.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()</p> <p>tpm2_read_public() calls tpm_buf_init() but fails to call tpm_buf_destroy() on two exit paths, leaking a page allocation:</p> <p>1. When name_size() returns an error (unrecognized hash algorithm), the function returns directly without destroying the buffer.</p> <p>2. On the success path, the buffer is never destroyed before returning.</p> <p>All other error paths in the function correctly call tpm_buf_destroy() before returning.</p> <p>Fix both by adding the missing tpm_buf_destroy() calls.</p> https://vulnerability.circl.lu/vuln/cve-2026-46096