title: KEYS: trusted: Fix TPM reservation for seal/unseal
description: In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix TPM reservation for seal/unseal
The original patch 8c657a0590de ("KEYS: trusted: Reserve TPM for seal
and unseal operations") was correct on the mailing list:
https://lore.kernel.org/linux-integrity/20210128235621.127925-4-jarkko@kernel.org/
But somehow got rebased so that the tpm_try_get_ops() in
tpm2_seal_trusted() got lost.  This causes an imbalanced put of the
TPM ops and causes oopses on TIS based hardware.
This fix puts back the lost tpm_try_get_ops()
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 67118bb78d72, lessThan: bf84ef2dd2cc, status: affected, versionType: git
version: 498b8fc1cdc1, lessThan: 39c8d760d44c, status: affected, versionType: git
version: 8c657a0590de, lessThan: 9d5171eab462, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 5.10.20, lessThan: 5.10.33, status: affected, versionType: custom
version: 5.11.3, lessThan: 5.11.17, status: affected, versionType: custom
}
