1326 matches found
MiracleLinux 9 : kernel-5.14.0-570.16.1.el9_6 (AXSA:2025-10431:39)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10431:39 advisory. kernel: iouring/sqpoll: zero sqd-thread on tctx errors CVE-2025-21633 kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number...
TPM Hardware Security Module Disclosure
The vulnerability of the TPM hardware security module in Windows operating systems is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the TPM module...
[SECURITY] Fedora 42 Update: libtpms-0.10.2-1.fc42
A library providing TPM functionality for VMs. Targeted for integration into Qemu...
[SECURITY] Fedora 43 Update: libtpms-0.10.2-1.fc43
A library providing TPM functionality for VMs. Targeted for integration into Qemu...
MiracleLinux 4 : trousers-0.3.13-2.AXS4 (AXSA:2014-608:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-608:01 advisory. Description : TrouSerS is an implementation of the Trusted Computing Group's Software Stack TSS specification. You can use TrouSerS to write applications that...
SUSE-SU-2026:20357-1 Security update for elemental-toolkit, elemental-operator
This update for elemental-toolkit, elemental-operator fixes the following issues: elemental-operator: - Update to v1.7.4: Bump github.com/rancher-sandbox/go-tpm and its dependencies This bump includes few CVE fixes: bsc1241826 CVE-2025-22872 bsc1241857 CVE-2025-22872 bsc1251511 CVE-2025-47911...
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1029)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : scsi: ses: Fix slab-out-of-bounds in sesintfremoveCVE-2023-53521 binfmtmisc: fix shift-out-of-bounds in checkspecialflagsCVE-2022-50497 scsi: lpfc...
CVE-2026-20829
Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...
SUSE CVE-2025-71077
In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2getpcrallocation does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001743)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001743 advisory. A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured this is not the...
MiracleLinux 4 : kernel-2.6.32-220.4.1.el6 (AXSA:2012-228:02)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-228:02 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...
MiracleLinux 3 : kernel-2.6.18-274.5.AXS3 (AXSA:2012-220:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-220:01 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...
CVE-2026-20829
Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...
CVE-2026-20829
CVE-2026-20829 is a TPM Trustlet Information Disclosure vulnerability in Windows TPM: an out-of-bounds read can allow an authorized, local attacker to disclose information. The linked Nessus/NVD/CIRCL entries confirm Windows TPM involvement and a local attack vector with low privileges. Microsoft...
CVE-2026-20829 TPM Trustlet Information Disclosure Vulnerability
...
AZL-74439 CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2getpcrallocation does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm...
UBUNTU-CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
CVE-2025-71077 tpm: Cap the number of PCR banks
In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2getpcrallocation does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm...
CVE-2025-71077
In the Linux kernel vulnerability CVE-2025-71077, tpm2_get_pcr_allocation() did not cap the number of PCR banks, allowing out-of-bounds values to cause more than minimal harm. The fix caps the limit to eight banks, limiting potential damage from external I/O. The issue affects the TPM/PCR allocat...
CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...