GSD-2022-1001323 tpm: use try_get_ops() in tpm-space.c

tpm: use trygetops in tpm-space.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.1 by commit ba84f9a48366dcc3cdef978599433efe101dd5bd. Fo...

PT-2022-29599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.17.1 Description The issue is related to a reference counting problem for the struct tpm chip in the Linux Kernel. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2022-29900

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.18 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.18,...

PT-2022-29903

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a reference counting problem for the struct tpm chip. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2022-30209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns a reference counting problem for the struct tpm chip. It was introduced in version v4.12 and fixed in version v5.15.33. The actual impact and attack plausibility have not y...

PT-2022-30729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns a reference counting problem for struct tpm chip. It was introduced in version v4.12 and fixed in version v4.14.276. The actual impact and attack plausibility have not yet...

PT-2022-30204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.32,...

PT-2022-30654

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a reference counting problem for the struct tpm chip. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2022-30418

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a reference counting problem for the struct tpm chip. It was introduced in version v4.12 and fixed in version v5.10.110. The actual impact and attack plausibility have not...

PT-2022-30555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.188,...

PT-2022-30558

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a fix in reference counting for struct tpm chip. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.109 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.10...

Updated swtpm packages fix security vulnerability

swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an...

MGASA-2022-0112 Updated swtpm packages fix security vulnerability

swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid value, may cause an...

Fedora: Security Advisory for swtpm (FEDORA-2022-087b1b4d2d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for swtpm (FEDORA-2022-12443a525c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Linux 7 : libtpms (ELSA-2022-9240)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9240 advisory. libtpms 0.8.8-1.el7 - spec: Update spec file to version 0.8.8 Fri Sep 17 2021 Stefan Berger - 0.8.7-1 - tpm2: Fixes for building and running with OpenS...

Design/Logic Flaw

Citrix Federated Authentication Service FAS 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module TPM to incorrectly store that key in the Microsoft Software Key Storage Provider MSKSP. This issue only...

PT-2025-8214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the exposure of the chip-tpm mutex in the tpm-space.c file, which could lead to a NULL dereference on the...

CVE-2022-26355

Summary: CVE-2022-26355 affects Citrix Federated Authentication Service (FAS) versions 7.17–10.6. When deployments configure the registration authority certificate’s private key to be stored in a TPM and PowerShell is used for that configuration, the private key is incorrectly stored in the Micro...