NetSight
IP …
high7.8

CVE-2022-2977

A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices.

Impact

A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.12 before 4.14.276
from 4.15 before 4.19.238
from 4.20 before 5.4.189
from 5.5 before 5.10.110
from 5.11 before 5.15.33
from 5.16 before 5.16.19

Weakness classification

CWE-416

References