{"id":"CVE-2024-49851","revision":"d6b863b269de4d28bc7386ec06cbfdcf","records":[{"revision":"d6b863b269de4d28bc7386ec06cbfdcf","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-49851","aliases":[],"title":"tpm: Clean up TPM space after command failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Clean up TPM space after command failure\n\ntpm_dev_transmit prepares the TPM space before attempting command\ntransmission. However if the command fails no rollback of this\npreparation is done. This can result in transient handles being leaked\nif the device is subsequently closed with no further commands performed.\n\nFix this by flushing the space in the event of command transmission\nfailure.","state":0,"publishedAt":"2024-10-21T12:18:44.742+00:00","modifiedAt":"2026-10-15T00:53:21.247+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/char/tpm/tpm-dev-common.c\",\n                        \"drivers/char/tpm/tpm2-space.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"87e8134c18977b566f4ec248c8a147244da69402\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"2c9b228938e9266a1065a3f4fe5c99b7235dc439\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"ebc4e1f4492d114f9693950621b3ea42b2f82bec\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"c84ceb546f30432fccea4891163f7050f5bee5dd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"82478cb8a23bd4f97935bbe60d64528c6d9918b4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"adf4ce162561222338cf2c9a2caa294527f7f721\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"3f9f72d843c92fb6f4ff7460d774413cde7f254c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"745b361e989af21ad40811c2586b60229f870a68\",\n                            \"lessThan\": \"e3aaebcbb7c6b403416f442d1de70d437ce313a7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/char/tpm/tpm-dev-common.c\",\n                        \"drivers/char/tpm/tpm2-space.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.285\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.227\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.168\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.113\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.54\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.13\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11.2\",\n                            \"lessThanOrEqual\": \"6.11.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/87e8134c18977b566f4ec248c8a147244da69402","https://git.kernel.org/stable/c/2c9b228938e9266a1065a3f4fe5c99b7235dc439","https://git.kernel.org/stable/c/ebc4e1f4492d114f9693950621b3ea42b2f82bec","https://git.kernel.org/stable/c/c84ceb546f30432fccea4891163f7050f5bee5dd","https://git.kernel.org/stable/c/82478cb8a23bd4f97935bbe60d64528c6d9918b4","https://git.kernel.org/stable/c/adf4ce162561222338cf2c9a2caa294527f7f721","https://git.kernel.org/stable/c/3f9f72d843c92fb6f4ff7460d774413cde7f254c","https://git.kernel.org/stable/c/e3aaebcbb7c6b403416f442d1de70d437ce313a7"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-49851","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-49851","identifiers":["CVE-2024-49851"]},"retained":false,"historicalAffected":[]}],"coverage":[]}