CVE-2026-98221

Updated on 06 Oct 2026

Severity

6.6 Medium severity

Details

CVSS score
6.6

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix tpm2_load_cmd() boundary check

tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.

Details

Affected packages:
kernel @ 5.14.0 (+2 more)

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 12 Planned —
Debian 13 Planned —