Linux Kernel EUVD-2026-32337

The ST33ZP24 is an STMicroelectronics Trusted Platform Module supported by the tpm_st33zp24 Linux kernel driver. TPM access is mediated through 'localities' - numbered access-control regions that a driver must acquire before submitting commands and release afterward. In st33zp24_send(), the locality is acquired early in the send path; however, the error branch reached when get_burstcount() returns -EBUSY (a timeout condition) performed a direct return, bypassing the cleanup code responsible for releasing that locality. The root cause is a missing goto to an error-handling label - a classic CWE-459 (Incomplete Cleanup) pattern. Each timed-out send operation permanently leaks one locality allocation until the TPM subsystem becomes unresponsive. No CWE is formally assigned in NVD, but the mechanism is unambiguously an incomplete error-path cleanup affecting a finite kernel resource.