NetSight
IP …
medium5.5

CVE-2026-45941

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure get_burstcount() can r…

Impact

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure get_burstcount() can return -EBUSY on timeout. When this happens, the function returns directly without releasing the locality that was acquired at the beginning of tpm_tis_i2c_send(). Use goto out_err to ensure proper cleanup when get_burstcount() fails.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.7 before 5.10.252
from 5.11 before 5.15.202
from 5.16 before 6.1.165
from 6.2 before 6.6.128
from 6.7 before 6.12.75
from 6.13 before 6.18.14

Weakness classification

CWE-401

References