CVE-2026-6727

The CVE describes a timing side-channel in RSA OAEP decryption within a TPM command interface. A privileged local attacker could exploit timing differences to recover information permitting decryption of ciphertexts for TPM-managed RSA keys (including the Endorsement Key, EK) and related blobs (i...