Vulnerability in Kernel package: tpm: use try_get_ops() in tpm-space.c
Summary
GSD-2022-1002144: tpm: use try_get_ops() in tpm-space.c. Affects Kernel versions < 95193d12f10a8a088843b25e0f5fe1d83ec6b079. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The tpm-space.c file within the Kernel package is responsible for handling operations related to the Trusted Platform Module (TPM). The TPM is a hardware component that provides cryptographic functions and secure storage. This vulnerability specifically affects the tpm-space.c file.
Vulnerability Detail
The vulnerability in tpm-space.c arises from the improper usage of the TPM operations. The code does not utilize the try_get_ops() function, which is designed to safely retrieve the TPM operations structure. This oversight can potentially lead to security vulnerabilities, although the exact impact and attack vectors have not been proven. It is important to note that this vulnerability has been addressed in the Linux Kernel version v5.10.109 by commit 95193d12f10a8a088843b25e0f5fe1d83ec6b079.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Updating to the fixed version is the recommended solution.
Conclusion
In conclusion, the Kernel package is vulnerable to a security issue in the tpm-space.c file. By updating to the fixed version, users can ensure the security of their systems. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a crucial component of the Linux operating system, providing core functionality and interfaces for hardware, software, and processes.
tpm-space.c is a file within the Kernel package that handles operations related to the Trusted Platform Module (TPM), a hardware component providing cryptographic functions and secure storage.
The exact impact and attack vectors of this vulnerability have not been proven. However, it is important to update to the fixed version to ensure the security of the system.
To fix this vulnerability, update the Kernel package to version v5.10.109 or later by pulling the latest updates from the official Linux Kernel repository.
No specific workaround has been mentioned for this vulnerability. Updating to the fixed version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
