Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel before 6.6.158.1‑1 may mis‑handle TPM data
published 29 days ago
Summary
The Linux kernel versions older than 6.6.158.1‑1 do not correctly check the size of data sent to the trusted platform module (TPM), which could let malformed commands slip through. This could allow an attacker to interfere with security functions that rely on the TPM. Update the kernel to the latest version or later to apply the fix.
What to do
- Update kernel to version 6.6.158.1-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | – | kernel |
< 6.6.158.1-1 Fix: upgrade to 6.6.158.1-1
|
| Azure Linux:3 | azure | kernel | <= 6.6.157.1-1 |
Original advisory text
CVE-2026-98221 affecting package kernel for versions less than 6.6.158.1-1
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix tpm2_load_cmd() boundary check
tpm2_load_cmd() does boundary checks against the ASN.1 size i.e.,
payload->blob_len. Address this by passing the decoded blob size to
tpm2_load_cmd(), and use it for the boundary checks.
KEYS: trusted: Fix tpm2_load_cmd() boundary check
tpm2_load_cmd() does boundary checks against the ASN.1 size i.e.,
payload->blob_len. Address this by passing the decoded blob size to
tpm2_load_cmd(), and use it for the boundary checks.
References
Timeline
Published6 Oct 2026
Updated2 Nov 2026
First seen7 Oct 2026
Sources
AZL-105987 · OSV
Track software like this
Free during beta