Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — KEYS: trusted: Fix TPM reservation for seal/unseal
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0024 15.5 —
AFFECTED
Product Versions Fixed
Linux 67118bb78d72aab5b831f054a74ae856339a1974 – —
Linux 5.10.20 – —
TIMELINE
Feb 25 Reserved by Linux
Feb 27 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2021-46922 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix TPM reservation for seal/unseal
The original patch 8c657a0590de ("KEYS: trusted: Reserve TPM for seal
and unseal operations") was correct on the mailing list:
https://lore.kernel.org/linux-integrity/20210128235621.127925-4-jarkko@kernel.org/
But somehow got rebased so that the tpm_try_get_ops() in
tpm2_seal_trusted() got lost. This causes an imbalanced put of the
TPM ops and causes oopses on TIS based hardware.
This fix puts back the lost tpm_try_get_ops()
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| February 25, 2024 | Reserved | Reserved by Linux |
| February 27, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2021-46922 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 67118bb78d72aab5b831f054a74ae856339a1974 | — |
| Linux | Linux | — | 5.10.20 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2021-46922 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.