Executive Summary

This vulnerability exists in the Linux kernel's tpm2-sessions component, specifically in the function tpm2_read_public(). The function calls tpm_buf_init() to initialize a buffer but fails to call tpm_buf_destroy() to properly free that buffer in two scenarios, causing a memory leak.

• If name_size() returns an error due to an unrecognized hash algorithm, the function returns immediately without destroying the buffer.
• On the successful execution path, the buffer is also never destroyed before returning.

All other error paths correctly destroy the buffer before returning. The fix involves adding the missing tpm_buf_destroy() calls to prevent the memory leak.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to a memory leak in the Linux kernel when using the tpm2_read_public() function. Over time, repeated leaks could consume system memory unnecessarily, potentially degrading system performance or stability.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is fixed by ensuring that the tpm_buf_destroy() function is called properly in the tpm2_read_public() function to avoid leaking page allocations.

To mitigate this vulnerability immediately, update your Linux kernel to a version that includes the fix for this issue.

Useful 0 Not Useful 0