CVE-2024-36477 Details
Description
In the Linux kernel, the following vulnerability has been resolved: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAX_SPI_FRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account for the 4 bytes of header that prepends the SPI data frame. This can result in out-of-bounds accesses and was confirmed with KASAN. Introduce SPI_HDRSIZE to account for the header and use to allocate the transfer buffer.
A vulnerability in the Linux kernel's TPM SPI transfer mechanism can cause out-of-bounds accesses. This issue arises because the transfer mechanism calculates the maximum transfer length and buffer size without accounting for the 4-byte header that precedes the SPI data frame. The vulnerability was confirmed using the Kernel Address Sanitizer (KASAN).
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 21, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1547183852dcdfcc25878db7dd3620509217b0cd | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/195aba96b854dd664768f382cd1db375d8181f88 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/de13c56f99477b56980c7e00b09c776d16b7563d | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/1547183852dcdfcc25878db7dd3620509217b0cd | CVE | Mailing ListPatch |
| https://git.kernel.org/stable/c/195aba96b854dd664768f382cd1db375d8181f88 | CVE | Mailing ListPatch |
| https://git.kernel.org/stable/c/de13c56f99477b56980c7e00b09c776d16b7563d | CVE | Mailing ListPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | > 6.6, < 6.6.33 > 6.7, < 6.9.4 6.10 rc1 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 23, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jun 24, 2024 | Initial Analysis | [email protected] |
| Jun 21, 2024 | New CVE Received | kernel.org |