In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix tpm2_load_cmd() boundary check

tpm2_load_cmd() does boundary checks against the ASN.1 size i.e.,
payload->blob_len. Address this by passing the decoded blob size to
tpm2_load_cmd(), and use it for the boundary checks.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f2219745250f388edacabe6cca73654131c67d0a affected < cc86227fea28aed86c1fb52a884560b4440da198
f2219745250f388edacabe6cca73654131c67d0a affected < b020b447338872440142fe8a57350a483da86b7a
f2219745250f388edacabe6cca73654131c67d0a affected < 3fd487c69ad3161e358c33c170bab0cf02a071b7
f2219745250f388edacabe6cca73654131c67d0a affected < 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348
f2219745250f388edacabe6cca73654131c67d0a affected < 9ddbc5f4bb498aff8096a5231574858a4bffee4f
f2219745250f388edacabe6cca73654131c67d0a affected < 134825dfc971fbf2b1d0f58f0b3bce8332ad0afb
f2219745250f388edacabe6cca73654131c67d0a affected < 114f00d738f15dd8c7318369edcdc53dd6d08763
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
5.15.222 unaffected ≤ 5.15.*
6.1.189 unaffected ≤ 6.1.*
6.6.158 unaffected ≤ 6.6.*
6.12.112 unaffected ≤ 6.12.*
6.18.54 unaffected ≤ 6.18.*
7.2.8 unaffected ≤ 7.2.*
7.3-rc4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/114f00d738f15dd8c7318369edcdc53dd6d08763 cve-icon cve-icon
https://git.kernel.org/stable/c/134825dfc971fbf2b1d0f58f0b3bce8332ad0afb cve-icon cve-icon
https://git.kernel.org/stable/c/3fd487c69ad3161e358c33c170bab0cf02a071b7 cve-icon cve-icon
https://git.kernel.org/stable/c/5afa57ea91481c6c49f194b0f5a5c4d96a4d7348 cve-icon cve-icon
https://git.kernel.org/stable/c/9ddbc5f4bb498aff8096a5231574858a4bffee4f cve-icon cve-icon
https://git.kernel.org/stable/c/b020b447338872440142fe8a57350a483da86b7a cve-icon cve-icon
https://git.kernel.org/stable/c/cc86227fea28aed86c1fb52a884560b4440da198 cve-icon cve-icon
History

Tue, 06 Oct 2026 09:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.
Title KEYS: trusted: Fix tpm2_load_cmd() boundary check
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-06T08:44:56.728Z

Reserved: 2026-09-25T10:25:14.327Z

Link: CVE-2026-98221

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-06T09:18:09.003

Modified: 2026-10-06T09:18:09.003

Link: CVE-2026-98221

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.