Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-71077
PUBLISHED
More InfoOfficial Page
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
View Known Exploited Vulnerability (KEV) details
Published At-13 Jan, 2026 | 15:31
Updated At-11 May, 2026 | 21:54
Rejected At-
▼CVE Numbering Authority (CNA)
tpm: Cap the number of PCR banks

In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/char/tpm/tpm-chip.c
  • drivers/char/tpm/tpm1-cmd.c
  • drivers/char/tpm/tpm2-cmd.c
  • include/linux/tpm.h
Default Status
unaffected
Versions
Affected
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before 8ceee7288152bc121a6bf92997261838c78bfe06 (git)
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before 275c686f1e3cc056ec66c764489ec1fe1e51b950 (git)
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before ceb70d31da5671d298bad94ae6c20e4bbb800f96 (git)
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before d88481653d74d622d1d0d2c9bad845fc2cc6fd23 (git)
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before b69492161c056d36789aee42a87a33c18c8ed5e1 (git)
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before 858344bc9210bea9ab2bdc7e9e331ba84c164e50 (git)
  • From bcfff8384f6c4e6627676ef07ccad9cfacd67849 before faf07e611dfa464b201223a7253e9dc5ee0f3c9e (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/char/tpm/tpm-chip.c
  • drivers/char/tpm/tpm1-cmd.c
  • drivers/char/tpm/tpm2-cmd.c
  • include/linux/tpm.h
Default Status
affected
Versions
Affected
  • 5.1
Unaffected
  • From 0 before 5.1 (semver)
  • From 5.10.248 through 5.10.* (semver)
  • From 5.15.198 through 5.15.* (semver)
  • From 6.1.160 through 6.1.* (semver)
  • From 6.6.120 through 6.6.* (semver)
  • From 6.12.64 through 6.12.* (semver)
  • From 6.18.3 through 6.18.* (semver)
  • From 6.19 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/8ceee7288152bc121a6bf92997261838c78bfe06
N/A
https://git.kernel.org/stable/c/275c686f1e3cc056ec66c764489ec1fe1e51b950
N/A
https://git.kernel.org/stable/c/ceb70d31da5671d298bad94ae6c20e4bbb800f96
N/A
https://git.kernel.org/stable/c/d88481653d74d622d1d0d2c9bad845fc2cc6fd23
N/A
https://git.kernel.org/stable/c/b69492161c056d36789aee42a87a33c18c8ed5e1
N/A
https://git.kernel.org/stable/c/858344bc9210bea9ab2bdc7e9e331ba84c164e50
N/A
https://git.kernel.org/stable/c/faf07e611dfa464b201223a7253e9dc5ee0f3c9e
N/A
Hyperlink: https://git.kernel.org/stable/c/8ceee7288152bc121a6bf92997261838c78bfe06
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/275c686f1e3cc056ec66c764489ec1fe1e51b950
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/ceb70d31da5671d298bad94ae6c20e4bbb800f96
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/d88481653d74d622d1d0d2c9bad845fc2cc6fd23
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b69492161c056d36789aee42a87a33c18c8ed5e1
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/858344bc9210bea9ab2bdc7e9e331ba84c164e50
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/faf07e611dfa464b201223a7253e9dc5ee0f3c9e
Resource: N/A
Details not found