CVE-2026-98221
Last modified
CVE-2026-98221 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks..
Description
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size i.e., payload->blob_len. Address this by passing the decoded blob size to tpm2_load_cmd(), and use it for the boundary checks.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= f2219745250f388edacabe6cca73654131c67d0a, < cc86227fea28aed86c1fb52a884560b4440da198; >= f2219745250f388edacabe6cca73654131c67d0a, < b020b447338872440142fe8a57350a483da86b7a; >= f2219745250f388edacabe6cca73654131c67d0a, < 3fd487c69ad3161e358c33c170bab0cf02a071b7; >= f2219745250f388edacabe6cca73654131c67d0a, < 5afa57ea91481c6c49f194b0f5a5c4d96a4d7348; >= f2219745250f388edacabe6cca73654131c67d0a, < 9ddbc5f4bb498aff8096a5231574858a4bffee4f; >= f2219745250f388edacabe6cca73654131c67d0a, < 134825dfc971fbf2b1d0f58f0b3bce8332ad0afb; >= f2219745250f388edacabe6cca73654131c67d0a, < 114f00d738f15dd8c7318369edcdc53dd6d08763 |
| Linux | Linux | 5.13 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98221?
How severe is CVE-2026-98221?
How do I fix CVE-2026-98221?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98216In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-98217In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98218In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98219In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9822The WP Hotel Booking WordPress plugin before 2.3.1 does not …6.5
- CVE-2026-98220In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98222In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98223In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98224In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98225In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98226In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98227In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98221?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST