TPM Locality Leak in STMicroelectronics st33zp24 Driver

Publication date: 2026-05-27

Last updated on: 2026-06-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix missing cleanup on get_burstcount() error get_burstcount() can return -EBUSY on timeout. When this happens, st33zp24_send() returns directly without releasing the locality acquired earlier. Use goto out_err to ensure proper cleanup when get_burstcount() fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-25

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-45871

EUVD

EUVD-2026-32337

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.14 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.4 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.128 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.75 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.202 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.165 (exc)
linux	linux_kernel	From 4.1 (inc) to 5.10.252 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's TPM driver for the st33zp24 chip. Specifically, the function get_burstcount() can return a -EBUSY error on timeout. When this error occurs, the st33zp24_send() function returns immediately without releasing the locality resource it previously acquired. This missing cleanup can lead to resource management issues.

Impact Analysis

The impact of this vulnerability is related to improper resource cleanup in the TPM driver. If the locality resource is not released properly due to the error, it could cause the TPM device or driver to become unresponsive or behave incorrectly, potentially affecting system stability or TPM operations.

Hi! I’m here to help you understand CVE-2026-45871. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70