CVE-2025-71077

Published: Jan 13, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm.

Affected (15)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.1.1 to 5.10.248
Linux Linux Kernel	From 5.11 to 5.15.198
Linux Linux Kernel	From 5.16 to 6.1.160
Linux Linux Kernel	From 6.13 to 6.18.3
Linux Linux Kernel	From 6.2 to 6.6.120
Linux Linux Kernel	From 6.7 to 6.12.64
Linux Linux Kernel	Version 5.1
Linux Linux Kernel	Version 6.19 rc1
Linux Linux Kernel	Version 6.19 rc2
Linux Linux Kernel	Version 6.19 rc3
Linux Linux Kernel	Version 6.19 rc4
Linux Linux Kernel	Version 6.19 rc5
Linux Linux Kernel	Version 6.19 rc6
Linux Linux Kernel	Version 6.19 rc7
Linux Linux Kernel	Version 6.19 rc8