Linux Kernel TPM PCR Bank Limit Vulnerability

A vulnerability in the Linux kernel's TPM (Trusted Platform Module) handling has been addressed. The issue arose because the function 'tpm2_get_pcr_allocation()' did not impose an upper limit on the number of PCR (Platform Configuration Register) banks, potentially allowing out-of-bounds values from external input to cause significant harm. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability could lead to out-of-bounds memory access, allowing external input to disrupt normal operation or potentially exploit other vulnerabilities.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the Linux kernel can be found in the official Linux kernel documentation.