Vulnerability in Linux

CVE-2026-46096

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() tpm2_read_public() calls tpm_buf_init() but fails to call tpm_buf_destroy() on two exit paths, leaking…

EPSS: 0.000 (6.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 20eda7c74b69fe9e1caf9b930a5c016bf8d755fa, bda1cbf73c6e241267c286427f2ed52b5735d872, a3b7eb67225c486a2da357c5db3e386f4e64bcde

References