CVE-2024-36477: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
In the Linux kernel, the following vulnerability has been resolved:
tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer
The Linux kernel CVE team has assigned CVE-2024-36477 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024062150-CVE-2024-36477-7063@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer
The TPM SPI transfer mechanism uses MAXSPIFRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account for the 4 bytes of header that prepends the SPI data frame. This can result in out-of-bounds accesses and was confirmed with KASAN.
Introduce SPIHDRSIZE to account for the header and use to allocate the transfer buffer.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.33 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.4 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36477?
CVE-2024-36477 has been classified with a severity rating that indicates a potential security risk to systems using the affected Linux kernel versions.
How do I fix CVE-2024-36477?
To remediate CVE-2024-36477, upgrade the Linux kernel to version 6.6.33, 6.9.4, or 6.10 depending on your system's configuration.
Which Linux kernel versions are affected by CVE-2024-36477?
CVE-2024-36477 affects Linux kernel versions prior to 6.6.33, 6.9.4, and 6.10.
Is CVE-2024-36477 specific to any particular distribution?
CVE-2024-36477 is documented for the Red Hat kernel and Debian Linux packages among others using vulnerable kernel versions.
What can happen if CVE-2024-36477 is not addressed?
Failing to address CVE-2024-36477 may expose systems to security vulnerabilities that can be exploited by malicious actors.