CVE-2022-23950

Keylime CVE-2022-23950: The Revocation Notifier in versions prior to 6.3.0 uses a fixed /tmp UNIX-domain-socket path, enabling unprivileged users to interfere with Keylime operations. Affected product/version is Keylime before 6.3.0. Mitigation: upgrade to 6.3.0 or later; as a workaround, restric...