CVE-2024-36967

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the tpm2 key encode() function in the Trusted Platform Module (TPM) subsystem of the Linux kernel. This leak occurs because the scratch variable is never freed. The fix involves calling kfree() in both the success and error cases. Exploitation of this issue could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.