booster

Booster - fast, secure, modern initramfs for Linux Booster makes early boot feel lighter, faster, and more dependable. It builds compact initramfs images that move your Linux system from firmware to the real root filesystem with minimal fuss and strong encrypted-boot support. Instead of packing a...

RMASmoke

RMASmoke A tool to disable Write-Protect using an oob write in the TPM2 BUILDING Check BUILDING.MD;...

PT-2026-116947

In the Linux kernel, the following vulnerability has been resolved: tpm: fix off-by-four bounds check in tpm2 get random When the response carries the TPM2 ST SESSIONS tag, tpm2 get random skips the 4-byte parameter size field before locating the random data, but the bounds check still validates...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtis: Added the function acpiputtable to prevent a memory leak. In checkacpitpm2, we obtain the TPM2 table just to ensure that it exists and isn’t used after initialization. Therefore, the acpiputtable function should be...

PT-2026-106550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the trusted keys subsystem where the tpm2 load cmd function performs boundary checks against the ASN.1 size, specifically the payload-blob len variable, rather than th...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KEYS: Trusted: Fixed a memory leak in tpm2keyencode. The “scratch” buffer is never freed. This issue is addressed by calling kfree in both the success and error cases...

Astra Linux – Vulnerability in tpm2-tss

tpm2-tss is an open-source software implementation of the Trusted Computing Group’s Trusted Platform Module 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, functions Tss2RCSetHandler and Tss2RCDecode both indexed into layerhandler using an 8-bit layer number. However,...

Rocky Linux 8 [CIQ] Security Update: tpm2-tools / tpm2-tools-debuginfo / tpm2-tools-debugsource (crlsa-2021_4413)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214413 advisory. tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

AlmaLinux 9.2 [TuxCare] Security Update: tpm2-tss / tpm2-tss-devel (ALMALINUX9.2:CLSA-2025:1760021057)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760021057 advisory. - tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In...

AlmaLinux 9.2 [TuxCare] Security Update: tpm2-tools (ALMALINUX9.2:CLSA-2025:1764614196)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764614196 advisory. - tpm2 is the source repository for the Trusted Platform Module TPM2.0 tools. This vulnerability allows attackers to manipulate tpm2checkquot...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2023_2757)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20232757 advisory. ntfs-3g: heap-based buffer overflow in ntfsck CVE-2021-46790 QEMU: VNC: integer underflow in vncclientcuttextext leads to CPU exhaustion CVE-2022-3165...

Rocky Linux 9 [CIQ] Security Update: tpm2-tools / tpm2-tools-debuginfo / tpm2-tools-debugsource Multiple Vulnerabilities (crlsa-2024_9424)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249424 advisory. tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the attest...

AlmaLinux 9.2 [TuxCare] Security Update: tpm2-tools (ALMALINUX9.2:CLSA-2026:1782977868)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782977868 advisory. - tpm2-tools is the source repository for the Trusted Platform Module TPM2.0 tools. A malicious attacker can generate arbitrary quote data...

Security update for libtpms

This update for libtpms fixes the following issue: CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:4363-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

SUSE-SU-2026:23878-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

SUSE-SU-2026:23926-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

Security update for libtpms

This update for libtpms fixes the following issues: CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads bsc1244528. CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628. Patch Instructions: To install this...

SUSE-SU-2026:4278-1 Security update for libtpms

This update for libtpms fixes the following issues: - CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads bsc1244528. - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

CVE-2026-85769 Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...