Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45871

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix missing cleanup on get_burstcount() error get_burstcount() can return -EBUSY on timeout. When this happens, st33zp24_send() returns directly without releasing the locality acquired earlier. Use goto out_err to ensure proper cleanup when get_burstcount() fails.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7f175dfa89c97e8a6ea5ce0ebfdfd9eef81f19ae58e9bb8c4782fd51c4d23f5e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/char/tpm/st33zp24/st33zp24.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.1"},{"lessThan":"4.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semve…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/char/tpm/st33zp24/st33zp24.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e0ce3da82341fcd6194175f1837946b2a894c625","status":"affected","version":"bf38b8710892333cec2d8069644eb36ff435fd6f","versionType":"git"},{"lessThan":"7687133509cf66ced120b667fefd21f80bf17993","status":"affected","version":"bf38b8710892333cec2d8069644eb36ff435fd6f","versionType":"git"},{"lessThan":"1256c6dc96d1e687e6e9b63088156ed07411b00c","status":"affected","version":"bf38b8710…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/char/tpm/st33zp24/st33zp24.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.1"},{"lessThan":"4.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semve…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/char/tpm/st33zp24/st33zp24.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e0ce3da82341fcd6194175f1837946b2a894c625","status":"affected","version":"bf38b8710892333cec2d8069644eb36ff435fd6f","versionType":"git"},{"lessThan":"7687133509cf66ced120b667fefd21f80bf17993","status":"affected","version":"bf38b8710892333cec2d8069644eb36ff435fd6f","versionType":"git"},{"lessThan":"1256c6dc96d1e687e6e9b63088156ed07411b00c","status":"affected","version":"bf38b8710…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1256c6dc96d1e687e6e9b63088156ed07411b00c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/3e91b44c93ad2871f89fc2a98c5e4fe6ca5db3d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/4fffb77d35d038f146e6192da583dbe4971d869e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/7687133509cf66ced120b667fefd21f80bf17993"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/a51cff9be046e13e1c1b2fe45d5c48b582ec9b8c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/cc09d55f519e15355de343264a22ac6682b8305e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/e0ce3da82341fcd6194175f1837946b2a894c625"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ec15eb67fe9df87981b4829b901ec254273ca483"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df00fdb179d7dfa7acc1ea11f5f34c00fd2342d60f32e9f7645333dcd1b457cb · sha256:9dabb5e009b13598… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer