Medium severity · published Oct 21, 2024
CVE-2024-49851
tpm: Clean up TPM space after command failure
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
tpm: Clean up TPM space after command failure
tpm_dev_transmit prepares the TPM space before attempting command
transmission. However if the command fails no rollback of this
preparation is done. This can result in transient handles being leaked
if the device is subsequently closed with no further commands performed.
Fix this by flushing the space in the event of command transmission
failure.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
4.12 before 5.10.227; 5.11 before 5.15.168; 5.16 before 6.1.113; 6.2 before 6.6.54; 6.7 before 6.10.13; 6.11 before 6.11.2 · source: NVD
LI
Linux · Linux
745b361e989af21ad40811c2586b60229f870a68 before 87e8134c18977b566f4ec248c8a147244da69402; 745b361e989af21ad40811c2586b60229f870a68 before 2c9b228938e9266a1065a3f4fe5c99b7235dc439; 745b361e989af21ad40811c2586b60229f870a68 before ebc4e1f4492d114f9693950621b3ea42b2f82bec; 745b361e989af21ad40811c2586b60229f870a68 before c84ceb546f30432fccea4891163f7050f5bee5dd; 745b361e989af21ad40811c2586b60229f870a68 before 82478cb8a23bd4f97935bbe60d64528c6d9918b4; 745b361e989af21ad40811c2586b60229f870a68 before adf4ce162561222338cf2c9a2caa294527f7f721; +3 more · source: vendor
RR
RUGGEDCOM RST2428P · Siemens
before V3.2 · source: CISA
SX
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · Siemens
before V3.2 · source: CISA
SX
SCALANCE XCM-/XRM-/XCH-/XRH-300 family · Siemens
before V3.2 · source: CISA
SS
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens
before V1.1.1 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-49851
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-49851
Patch
https://git.kernel.org/stable/c/2c9b228938e9266a1065a3f4fe5c99b7235dc439
Patch
https://git.kernel.org/stable/c/3f9f72d843c92fb6f4ff7460d774413cde7f254c
Patch
https://git.kernel.org/stable/c/82478cb8a23bd4f97935bbe60d64528c6d9918b4
git.kernel.org
https://git.kernel.org/stable/c/87e8134c18977b566f4ec248c8a147244da69402
Patch
https://git.kernel.org/stable/c/adf4ce162561222338cf2c9a2caa294527f7f721
Patch
https://git.kernel.org/stable/c/c84ceb546f30432fccea4891163f7050f5bee5dd
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability