{"id":"CVE-2026-45941","title":"tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure\n\nget_burstcount() can return -EBUSY on timeout. When this happens, the\nfunction returns directly wi…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 8f124c5582d443ac9fb690db26d08cab5d6ba76e","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < c24c9c4cab11858f22f309521ba7ea5b1e7385f2","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 1bb8f8826d0748b4b92a98fb6b6dfe52081739f5","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 948966e546f29af04391d98b8e378e4a7670c1c1","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < a61b8412e3eb8b71646dba867e8252d8560a1a27","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 1a22048c1117cdfac185ba450aba67ed6b65dc87","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 2f7a665e1323359d99c74301d1e180f5e2c40181","Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < bbd6e97c836cbeb9606d7b7e5dcf8a1d89525713","Linux 3.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:02:33.134623Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:03:15.764Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45941","references":[{"url":"https://git.kernel.org/stable/c/8f124c5582d443ac9fb690db26d08cab5d6ba76e"},{"url":"https://git.kernel.org/stable/c/c24c9c4cab11858f22f309521ba7ea5b1e7385f2"},{"url":"https://git.kernel.org/stable/c/1bb8f8826d0748b4b92a98fb6b6dfe52081739f5"},{"url":"https://git.kernel.org/stable/c/948966e546f29af04391d98b8e378e4a7670c1c1"},{"url":"https://git.kernel.org/stable/c/a61b8412e3eb8b71646dba867e8252d8560a1a27"},{"url":"https://git.kernel.org/stable/c/1a22048c1117cdfac185ba450aba67ed6b65dc87"},{"url":"https://git.kernel.org/stable/c/2f7a665e1323359d99c74301d1e180f5e2c40181"},{"url":"https://git.kernel.org/stable/c/bbd6e97c836cbeb9606d7b7e5dcf8a1d89525713"}],"tags":["cve.org"],"epss":0.00123,"epssPercentile":0.02084,"ingestedAt":"2026-11-06T16:57:43.375Z","slug":"CVE-2026-45941","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure\n\nget_burstcount() can return -EBUSY on timeout. When this happens, the\nfunction returns directly without releasing the locality that was\nacquired at the beginning of tpm_tis_i2c_send().\n\nUse goto out_err to ensure proper cleanup when get_burstcount() fails.\n\n## Affected\n\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 8f124c5582d443ac9fb690db26d08cab5d6ba76e`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < c24c9c4cab11858f22f309521ba7ea5b1e7385f2`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 1bb8f8826d0748b4b92a98fb6b6dfe52081739f5`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 948966e546f29af04391d98b8e378e4a7670c1c1`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < a61b8412e3eb8b71646dba867e8252d8560a1a27`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 1a22048c1117cdfac185ba450aba67ed6b65dc87`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < 2f7a665e1323359d99c74301d1e180f5e2c40181`\n- `Linux >= aad628c1d91a6db57e572e4c1f35e863d81061d7 < bbd6e97c836cbeb9606d7b7e5dcf8a1d89525713`\n- `Linux 3.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}