CVE-2026-45871EPSS p5.9%
CVE-2026-45871CVE-2026-45871
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
tpm: st33zp24: Fix missing cleanup on get_burstcount() error
get_burstcount() can return -EBUSY on timeout. When this happens,
st33zp24_send() returns directly without releasing the locality
acquired earlier.
Use goto out_err to ensure proper cleanup when get_burstcount() fails.
Scoring
| CVSS | 5.5 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 0.16% probability of exploitation · percentile 5.9% · 2026-08-11T12:00:17Z |
| Last modified | 2026-06-25 |