CVE-2026-46096
- Source
- https://cve.org/CVERecord?id=CVE-2026-46096
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46096.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-46096
- Downstream
BELL (1)
DEBIAN (1)
openSUSE (2)
ROOT (1)
SUSE (5)
- Related
- Published
- 2026-05-27T12:58:56Z
- Modified
- 2026-10-08T02:51:24Z
- Summary
- tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()
tpm2_read_public() calls tpm_buf_init() but fails to call tpm_buf_destroy() on two exit paths, leaking a page allocation:
-
When name_size() returns an error (unrecognized hash algorithm), the function returns directly without destroying the buffer.
-
On the success path, the buffer is never destroyed before returning.
All other error paths in the function correctly call tpm_buf_destroy() before returning.
Fix both by adding the missing tpm_buf_destroy() calls.
-
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46096.json" }- References
-
- https://git.kernel.org/stable/c/2f434be87e256fd58254f60ddf5d7d58e775ca0b
- https://git.kernel.org/stable/c/f0f75a3d98b7959a8677b6363e23190f3018636b
- https://git.kernel.org/stable/c/f8775d9d9062da662cc861f9ff7722a65896d4cd
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46096.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-46096
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced20eda7c74b69fe9e1caf9b930a5c016bf8d755faFixedf8775d9d9062da662cc861f9ff7722a65896d4cd
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbda1cbf73c6e241267c286427f2ed52b5735d872Fixed2f434be87e256fd58254f60ddf5d7d58e775ca0bFixedf0f75a3d98b7959a8677b6363e23190f3018636b
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.18.3Fixed6.18.27
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.12.64Fixed6.13
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda3b7eb67225c486a2da357c5db3e386f4e64bcde
Affected versions
v6.*
v6.12.100
v6.12.101
v6.12.102
v6.12.103
v6.12.104
v6.12.105
v6.12.106
v6.12.107
v6.12.108
v6.12.109
v6.12.110
v6.12.111
v6.12.112
v6.12.64
v6.12.65
v6.12.66
v6.12.67
v6.12.68
v6.12.69
v6.12.70
v6.12.71
v6.12.72
v6.12.73
v6.12.74
v6.12.75
v6.12.76
v6.12.77
v6.12.78
v6.12.79
v6.12.80
v6.12.81
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.12.86
v6.12.87
v6.12.88
v6.12.89
v6.12.90
v6.12.91
v6.12.92
v6.12.93
v6.12.94
v6.12.95
v6.12.96
v6.12.97
v6.12.98
v6.12.99
v6.18.10
v6.18.11
v6.18.12
v6.18.13
v6.18.14
v6.18.15
v6.18.16
v6.18.17
v6.18.18
v6.18.19
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.3
v6.18.4
v6.18.5
v6.18.6
v6.18.7
v6.18.8
v6.18.9