Jarkko SakkinenandGreg Kroah-Hartman d88481653d tpm: Cap the number of PCR banks ...

commit faf07e611d upstream.

tpm2_get_pcr_allocation() does not cap any upper limit for the number of
banks. Cap the limit to eight banks so that out of bounds values coming
from external I/O cause on only limited harm.

Cc: stable@vger.kernel.org # v5.10+
Fixes: bcfff8384f ("tpm: dynamically allocate the allocated_banks array")
Tested-by: Lai Yi <yi1.lai@linux.intel.com>
Reviewed-by: Jonathan McDowell <noodles@meta.com>
Reviewed-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@opinsys.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-11 15:22:20 +01:00

..

agp

…

hw_random

hwrng: ks-sa - fix division by zero in ks_sa_rng_init

2025-10-15 11:58:05 +02:00

ipmi

ipmi: Fix __scan_channels() failing to rescan channels

2026-01-11 15:21:51 +01:00

mwave

…

tpm

tpm: Cap the number of PCR banks

2026-01-11 15:22:20 +01:00

xilinx_hwicap

…

xillybus

…

adi.c

…

apm-emulation.c

…

applicom.c

char: applicom: fix NULL pointer dereference in ac_ioctl

2026-01-11 15:21:58 +01:00

applicom.h

…

bsr.c

…

ds1620.c

…

dsp56k.c

…

dtlk.c

…

hangcheck-timer.c

…

hpet.c

…

Kconfig

…

lp.c

…

Makefile

…

mem.c

…

misc.c

char: misc: restrict the dynamic range to exclude reserved minors

2025-11-24 10:29:46 +01:00

mspec.c

…

nsc_gpio.c

…

nvram.c

…

nwbutton.c

…

nwbutton.h

…

nwflash.c

…

pc8736x_gpio.c

…

powernv-op-panel.c

…

ppdev.c

…

ps3flash.c

…

random.c

…

scx200_gpio.c

…

sonypi.c

…

tlclk.c

…

toshiba.c

…

ttyprintk.c

…

uv_mmtimer.c

…

virtio_console.c

virtio_console: fix missing byte order handling for cols and rows

2025-05-02 07:50:45 +02:00