CVEPublished 2024-10-21Modified 2026-05-120 articles on news6 live referencesNVD data

CVE-2024-49851Linux · Linux_kernel

Vulnerability data via NVD (ingested)

CVSS v3.1
5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS percentile
3
Exploit Prediction Scoring System · top 97% of all CVEs
Description

In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handles being leaked if the device is subsequently closed with no further commands performed. Fix this by flushing the space in the event of command transmission failure.

Timeline
Published 2024-10-21
Modified 2026-05-12

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub

No public proof-of-concept repositories found for CVE-2024-49851 on GitHub.
We haven't classified any articles referencing CVE-2024-49851 yet. The external references above still apply.