CVE-2025-71077 — tpm: Cap the number of PCR banks

Back Back to CVE browser

MEDIUM

tpm: Cap the number of PCR banks

Published Jan 13, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.1
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.1
- Version
  5.10.248
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.198
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.1.160
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.12.64
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.3
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.19
  Status
  unaffected
  Constraints
  <=*
- Version
  6.6.120
  Status
  unaffected
  Constraints
  <=6.6.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.1	affected	-
0	unaffected	<5.1
5.10.248	unaffected	<=5.10.*
5.15.198	unaffected	<=5.15.*
6.1.160	unaffected	<=6.1.*
6.12.64	unaffected	<=6.12.*
6.18.3	unaffected	<=6.18.*
6.19	unaffected	<=*
6.6.120	unaffected	<=6.6.*

Red Hat Enterprise Linux 10

kernel

Affected
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Affected
Red Hat Enterprise Linux 8

kernel-rt

Affected
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Affected	n/a
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Affected	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.14% 0.00143

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00143

Score over time

Jan–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.14% (0.00143)	3.06th	v5 (v2026.06.15)
Jun 15, 2026	0.12% (0.00123)	2.38th	v5 (v2026.06.15)
Jan 14, 2026	0.02% (0.00018)	3.87th	v4 (v2025.03.14)

Weaknesses (1)

CWE-1285

References (12)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-71077		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2429101		Issue Tracking
https://git.kernel.org/stable/c/275c686f1e3cc056ec66c764489ec1fe1e51b950		Patch
https://git.kernel.org/stable/c/858344bc9210bea9ab2bdc7e9e331ba84c164e50		Patch
https://git.kernel.org/stable/c/8ceee7288152bc121a6bf92997261838c78bfe06		Patch
https://git.kernel.org/stable/c/b69492161c056d36789aee42a87a33c18c8ed5e1		Patch
https://git.kernel.org/stable/c/ceb70d31da5671d298bad94ae6c20e4bbb800f96		Patch
https://git.kernel.org/stable/c/d88481653d74d622d1d0d2c9bad845fc2cc6fd23		Patch
https://git.kernel.org/stable/c/faf07e611dfa464b201223a7253e9dc5ee0f3c9e		Patch
https://lore.kernel.org/linux-cve-announce/2026011327-CVE-2025-71077-6e08@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-71077
https://www.cve.org/CVERecord?id=CVE-2025-71077