HomeDefectsLIN1023-18287
Acknowledged

LIN1023-18287 : Security Advisory - linux - CVE-2025-71077

Created: Jan 13, 2026    Updated: Jan 19, 2026
Found In Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tpm: Cap the number of PCR banks

tpm2_get_pcr_allocation() does not cap any upper limit for the number of
banks. Cap the limit to eight banks so that out of bounds values coming
from external I/O cause on only limited harm.