CVE-2024-49851

A flaw was found in the Linux kernel's Trusted Platform Module (TPM) driver. When a TPM command transmission fails, the driver does not properly clean up allocated resources, leading to a leak of transient handles. This resource exhaustion can result in a denial of service, making the TPM device unavailable for further operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If the Trusted Platform Module (TPM) functionality is not required, the tpm_tis kernel module can be prevented from loading to mitigate this vulnerability.

To blacklist the tpm_tis module:

1. Create a new configuration file: echo "blacklist tpm_tis" | sudo tee /etc/modprobe.d/blacklist-tpm_tis.conf
2. Regenerate the initramfs to ensure the blacklist is applied at boot: sudo dracut -f (for systems using dracut) or sudo mkinitcpio -P (for systems using mkinitcpio)
3. Reboot the system for the changes to take effect.

This mitigation will disable TPM functionality, which may impact applications or features that rely on it.