CVE-2026-98845

A flaw was found in the Linux kernel's Trusted Platform Module (TPM) subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Consequently, the TPM continues serving requests and cryptographic authorization sessions may proceed using uninitialized key handles, compromising the integrity of secure operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.