CVE-2025-68792

An out-of-bounds array indexing flaw was found in the Linux kernel's TPM2 session handling code. The name_size lookup function uses TPM_ALG_ID values directly as array indices without bounds checking. An unrecognized algorithm ID could cause out-of-bounds memory access, potentially leading to memory corruption or a kernel crash.

Triggering this flaw requires interaction with a TPM device that returns unexpected or malicious algorithm IDs. In typical deployments, TPM firmware is trusted and returns valid values. The vulnerability is primarily a concern for systems with potentially compromised TPM hardware or during TPM development/testing scenarios.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.