CVE - CVE-2024-36967

CVE-ID
CVE-2024-36967	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by calling kfree() in the success, and in the error case.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/189c768932d435045b1fae12bf63e53866f06a28 URL:https://git.kernel.org/stable/c/189c768932d435045b1fae12bf63e53866f06a28 MISC:https://git.kernel.org/stable/c/1e6914fa8e7798bcf3ce4a5b96ea4ac1d5571cdf URL:https://git.kernel.org/stable/c/1e6914fa8e7798bcf3ce4a5b96ea4ac1d5571cdf MISC:https://git.kernel.org/stable/c/5d91238b590bd883c86ba7707c5c9096469c08b7 URL:https://git.kernel.org/stable/c/5d91238b590bd883c86ba7707c5c9096469c08b7 MISC:https://git.kernel.org/stable/c/cf26a92f560eed5d6ddc3d441cc645950cbabc56 URL:https://git.kernel.org/stable/c/cf26a92f560eed5d6ddc3d441cc645950cbabc56 MISC:https://git.kernel.org/stable/c/e62835264d0352be6086975f18fdfed2b5520b13 URL:https://git.kernel.org/stable/c/e62835264d0352be6086975f18fdfed2b5520b13 MISC:https://git.kernel.org/stable/c/ffcaa2172cc1a85ddb8b783de96d38ca8855e248 URL:https://git.kernel.org/stable/c/ffcaa2172cc1a85ddb8b783de96d38ca8855e248
Assigning CNA
kernel.org
Date Record Created
20240530	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240530)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.