napper-for-tpm

root@kitploit: ,----------------, ,---------, ,-----------------------, ," ,"| ," Napper v1.3 for TPM ," | ," ," | +-----------------------+ | ," ," | | .-----------------Z | | +---------+ | | | Z | | | | -==----'| | | | ︶ ︶ z | | | | | | | | - | | |/----| ==== oo | | | | | | | ,/| | ," |...

attestos

attestos Linux ブートアテステーションの実験用イメージおよびエビデンスハーネス。アンチチートベンダーが、ディストリビューション名の許可リストに頼る代わりに検証可能な内容をテストするためのものです。 メカニズム、脅威モデル、ベンダー仕様は、plunder707/attested-gaming にあります。このリポジトリは、そのエビデンスを生成するイメージです。 ステータス: ソースメカニクスプレビュー。インストール不可または本番信頼不可。 GitHub Actions の実行 31157890393 と 31159951490 は、Bazzite 派生の QCOW2...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tpm: Limit the number of PCR banks The function tpm2getpcrallocation does not impose any upper limit on the number of banks. The limit is set to eight banks, so values that exceed this limit from external I/O cause only limite...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtimeidle callback and the .remove callback in the rtsxpcr PCI driver leads to a kernel crash due to an unhandled page fault 1. The proble...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: Fix VLAN traffic leaks The PCRMATRIX field was set to all 1’s when VLAN filtering is enabled, but it wasn’t reset when VLAN filtering was disabled. This could lead to traffic leaks: ip link add br0 type bridge...

CVE-2026-82017

IGEL OS 12 (before 12.7.6 ) and 11 (before 11.11.150 ) are affected by a boot registry parameter injection vulnerability. The root cause is an unencrypted and unsigned configuration area that is read by the signed bootloader. An attacker with physical access can write malicious Linux kernel comma...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker versions prior to v7.7.4 are vulnerable to a flaw where the default TPM PCR policy fails to account for the system boot state. This oversight allows the Trusted Platform Module (TPM) to be unsealed through an unintended execution path or from an alternativ...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

CVE-2025-59321: Initialization of a Resource with an Insecure Default

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

PT-2026-71069

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software contains a default TPM PCR policy that fails to consider the system boot state. This flaw allows the Trusted Platform Module TPM, a specialized chip used to...

CVE-2025-59321

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...

MINI-247X-764F-QPCR

Bulletin has no description...

SUSE CVE-2025-64186

Evervault is a payment security solution. A vulnerability was identified in the evervault-go SDK's attestation verification logic in versions of evervault-go prior to 1.3.2 that may allow incomplete documents to pass validation. This may cause the client to trust an enclave operator that does not...

MINI-HC9G-27JW-PCR4

Bulletin has no description...

SUSE-SU-2026:22459-1 Security update for pcr-oracle

This update for pcr-oracle fixes the following issues Update to 0.6.3: Security issue: - integer underflow vulnerability in parsesbatlevelsection bsc1265042. Non security issue: - Lockout Authorization error for libvirt-emulated TPM bsc1265871. Changes for pcr-oracle: + Relax TPM self-test...

MINI-PCRC-8QM9-2XH3

Bulletin has no description...

MINI-PCR5-RJH2-F6GF

Bulletin has no description...

PT-2026-44854

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description An issue exists where the firmware measures bytes differently from those actually being used. This affects the PCR5 measurements, which record the expected GUID Partition Table GPT layout...

SUSE CVE-2023-43630

PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of the config partition not being measured correctly. Also, the “vault” key is...