CVE-2026-98221KEYS: trusted: Fix tpm2_load_cmd() boundary check
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f2219745250f388edacabe6cca73654131c67d0a before cc86227fea28aed86c1fb52a884560b4440da198; from f2219745250f388edacabe6cca73654131c67d0a before b020b447338872440142fe8a57350a483da86b7a; from f2219745250f388edacabe6cca73654131c67d0a before 3fd487c69ad3161e358c33c170bab0cf02a071b7; from f2219745250f388edacabe6cca73654131c67d0a before 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348; from f2219745250f388edacabe6cca73654131c67d0a before 9ddbc5f4bb498aff8096a5231574858a4bffee4f; from f2219745250f388edacabe6cca73654131c67d0a before 134825dfc971fbf2b1d0f58f0b3bce8332ad0afb; from f2219745250f388edacabe6cca73654131c67d0a before 114f00d738f15dd8c7318369edcdc53dd6d08763 | CNA record |
References
- https://git.kernel.org/stable/c/cc86227fea28aed86c1fb52a884560b4440da198
- https://git.kernel.org/stable/c/b020b447338872440142fe8a57350a483da86b7a
- https://git.kernel.org/stable/c/3fd487c69ad3161e358c33c170bab0cf02a071b7
- https://git.kernel.org/stable/c/5afa57ea91481c6c49f194b0f5a5c4d96a4d7348
- https://git.kernel.org/stable/c/9ddbc5f4bb498aff8096a5231574858a4bffee4f
- https://git.kernel.org/stable/c/134825dfc971fbf2b1d0f58f0b3bce8332ad0afb
- https://git.kernel.org/stable/c/114f00d738f15dd8c7318369edcdc53dd6d08763
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.