CVE-2026-53038

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.12.40

Description A global out-of-bounds read occurs in the create securityfs measurement lists() function when the system uses a TPM chip with an unsupported hash algorithm. The issue arises because ima tpm chip->allocated banks[i].crypto id is initialized to HASH ALGO LAST for unsupported algorithms, but the code subsequently uses this value to index into the hash algo name[] array without proper validation. This can lead to memory corruption or system instability when the kernel attempts to create securityfs files for these unsupported algorithms.

Recommendations Update the Linux kernel to a version where the create securityfs measurement lists() function is patched to use a generic tpm alg <ID> postfix for unsupported crypto algorithms instead of indexing hash algo name[].