TPM Vulnerability in Linux Kernel Affects Multiple Releases

CVE-2026-98845

What is CVE-2026-98845?

A significant vulnerability exists within the Linux kernel regarding the Trusted Platform Module (TPM) handling. Specifically, a mismatch during the null key name integrity check does not disable the TPM chip as intended, allowing it to proceed with command executions even when integrity checks have failed. This flaw could potentially enable attackers to exploit the system by leveraging this oversight, making it crucial for users to be aware of the risks associated and to apply the necessary patches or mitigations provided by the developers.

References