nvd-json-data-feeds/CVE-2024/CVE-2024-422xx/CVE-2024-42255.json

{
  "id": "CVE-2024-42255",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2024-08-08T09:15:08.470",
  "lastModified": "2024-08-08T13:04:18.753",
  "vulnStatus": "Undergoing Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Use auth only after NULL check in tpm_buf_check_hmac_response()\n\nDereference auth after NULL check in tpm_buf_check_hmac_response().\nOtherwise, unless tpm2_sessions_init() was called, a call can cause NULL\ndereference, when TCG_TPM2_HMAC is enabled.\n\n[jarkko: adjusted the commit message.]"
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tpm: use autenticaci\u00f3n solo despu\u00e9s de la verificaci\u00f3n NULL en tpm_buf_check_hmac_response() Desreferenciar la autenticaci\u00f3n despu\u00e9s de la verificaci\u00f3n NULL en tpm_buf_check_hmac_response(). De lo contrario, a menos que se haya llamado a tpm2_sessions_init(), una llamada puede causar una desreferencia NULL, cuando TCG_TPM2_HMAC est\u00e1 habilitado. [jarkko: ajust\u00f3 el mensaje de confirmaci\u00f3n.]"
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/7dc357d343f134bf59815ff6098b93503ec8a23b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b9afbb9a0c734197c59c43610071041044bf1562",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}