CVE-2026-98221
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.
SeverityUnknown
CVSS—
Exploit probability7. percentile0.2%
Product
Linux
PublishedOct 6, 2026
First seenOct 6, 2026
How to fix
Update
- Linux Linuxcc86227fea28aed86c1fb52a884560b4440da198, b020b447338872440142fe8a57350a483da86b7a, 3fd487c69ad3161e358c33c170bab0cf02a071b7, 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348, 9ddbc5f4bb498aff8096a5231574858a4bffee4f, 134825dfc971fbf2b1d0f58f0b3bce8332ad0afb, 114f00d738f15dd8c7318369edcdc53dd6d08763 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f2219745250f388edacabe6cca73654131c67d0a ≤ v < cc86227fea28aed86c1fb52a884560b4440da198, f2219745250f388edacabe6cca73654131c67d0a ≤ v < b020b447338872440142fe8a57350a483da86b7a, f2219745250f388edacabe6cca73654131c67d0a ≤ v < 3fd487c69ad3161e358c33c170bab0cf02a071b7, f2219745250f388edacabe6cca73654131c67d0a ≤ v < 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348, f2219745250f388edacabe6cca73654131c67d0a ≤ v < 9ddbc5f4bb498aff8096a5231574858a4bffee4f, f2219745250f388edacabe6cca73654131c67d0a ≤ v < 134825dfc971fbf2b1d0f58f0b3bce8332ad0afb, f2219745250f388edacabe6cca73654131c67d0a ≤ v < 114f00d738f15dd8c7318369edcdc53dd6d08763, 5.13 | cc86227fea28aed86c1fb52a884560b4440da198, b020b447338872440142fe8a57350a483da86b7a, 3fd487c69ad3161e358c33c170bab0cf02a071b7, 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348, 9ddbc5f4bb498aff8096a5231574858a4bffee4f, 134825dfc971fbf2b1d0f58f0b3bce8332ad0afb, 114f00d738f15dd8c7318369edcdc53dd6d08763 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.