ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent is a ssh-agent compatible agent that allows keys to be created by the Trusted Platform Module TPM for authentication towards ssh servers. TPM sealed keys are private keys created inside the Trusted Platform Module TPM and sealed in .tpm suffixed files. They are bou...

incus-os

Introduction IncusOS is an immutable OS image dedicated to running Incus. It's based on Debian 13 and built using mkosi. IncusOS can be installed on modern amd64 x8664 and arm64 systems. This aims at providing a very fast, safe and reliable way to run an Incus server. It's got a strong focus on...

webauthn_tpm_portable

WebAuthn TPM Portable Credentials ⚠️ Early proof of concept. This project has not been thoroughly tested or audited. Do not use it for anything beyond experimentation. Portable, hardware-backed WebAuthn/passkey credentials that work across multiple devices using TPM 2.0. Traditional TPM credential...

optee_ftpm

OP-TEE integration for the MS TPM 2.0 Reference Implementation fTPM fTPM TA The fTPM Trusted Application TA provides a secure firmware implementation of a TPM using the MS reference implementation. The platform specific integration code is kept in this repository. This is a fork from the the MS...

TPMGenie

TPM Genie TPM Genie is designed to aid in vulnerability research of Trusted Platform Modules. As a serial bus interposer, TPM Genie is capable of intercepting and modifying all traffic that is sent across the I2C channel between the host machine and a discrete TPM chip. Outside of research, the...

hiya

Hiya Fingerprint authentication for Linux. Handles sudo, su, polkit, screen unlock, SSH keys, and browser passkeys from a single enrollment. Replaces fprintd. Works with existing DEs without patching them. Requirements libfprint-supported fingerprint sensor Linux with PAM, systemd, D-Bus TPM 2.0...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

[SECURITY] Fedora 44 Update: tpm2-tss-4.1.5-1.fc44

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...

CVE-2026-99221

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

AZL-112541 CVE-2026-99221 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

DEBIAN-CVE-2026-99221

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

CVE-2026-99221

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

UBUNTU-CVE-2026-99221

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

CVE-2026-99221

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

CVE-2026-99221 keys/trusted_keys: return immediately after TPM unseal failure

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

CVE-2026-99221

The Linux kernel contains a vulnerability in the keys/trusted_keys component. Specifically, the trusted_tpm_unseal() function incorrectly proceeds to call pcrlock() even if a TPM unseal operation fails. If pcrlock() succeeds, its return value overwrites the original unseal error, leading to succe...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface; however, their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command completes its...

[SECURITY] Fedora 45 Update: tpm2-tss-4.2.1-1.fc45

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...

CVE-2026-99221: Linux: In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM…

In the Linux kernel, the following vulnerability has been resolved: keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its return value overwrites the unseal error, causing key instantiation ...

PT-2026-135510

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the keys/trusted keys component where the trusted tpm unseal function fails to return immediately after a TPM unseal operation failure. Instead, it proceeds to call...