CVE-2011-1162: The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users...

Security readout for executives and security teams

CVE-2011-1162 is a local information disclosure issue in Linux kernel 2.6 TPM handling. A local user might read leftover results from a previous TPM command because memory was not properly cleared. Business urgency depends on whether legacy Linux 2.6 systems with TPM usage remain in service. Likely exposure is limited to systems running Linux kernel 2.6 with TPM functionality available and local user access. The bundle does not identify specific distributions, downstream package names, or affected configuration details. Treat this as a legacy platform hygiene issue unless sensitive TPM-backed workflows remain on Linux 2.6 systems. It is not described as remotely exploitable, but unsupported kernels can accumulate broader risk. Mitigation focus: Inventory legacy Linux 2.6 systems using TPM functionality.; Check distribution and vendor advisories for fixed kernel packages.; Prioritize updating affected kernels through supported vendor channels..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.