CVE-2025-71077

MediumCVSS 5.5/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tpm: Cap the number of PCR banks

tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
LinuxLinux>= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < 8ceee7288152bc121a6bf92997261838c78bfe06; >= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < 275c686f1e3cc056ec66c764489ec1fe1e51b950; >= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < ceb70d31da5671d298bad94ae6c20e4bbb800f96; >= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < d88481653d74d622d1d0d2c9bad845fc2cc6fd23; >= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < b69492161c056d36789aee42a87a33c18c8ed5e1; >= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < 858344bc9210bea9ab2bdc7e9e331ba84c164e50; >= bcfff8384f6c4e6627676ef07ccad9cfacd67849, < faf07e611dfa464b201223a7253e9dc5ee0f3c9e
LinuxLinux5.1

References

Timeline

Published
Jan 13, 2026
Last modified
Oct 19, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-710787.8In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB preload On systems CVE-2025-710795.5In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_wriCVE-2025-71085.4A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the fuCVE-2025-710805.5In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT On PREEMPT_RTCVE-2025-710815.5In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to theCVE-2025-710827.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts comCVE-2025-710835.5In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for aCVE-2025-710845.5In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID isCVE-2025-710855.5In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() CVE-2025-710867.8In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_CVE-2025-710875.5In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavf_config_rss_reg() There are off-by-CVE-2025-710885.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simul
CVE-2025-71077: Medium severity, CVSS 5.5 | Vulnix