libtpms: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 6.5
  CVE-2026-85769 Public exploit

  Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize

  A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state (for example during a virtual machine's power-on or state/migration restore), a malformed state blob can supply an oversized skip-block length that i…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Sep 4, 2026

Revision history

1. 2026-09-29 #5

   Neue Updates von SUSE aufgenommen

2. 2026-09-28 #4

   Neue Updates von SUSE aufgenommen

3. 2026-09-27 #3

   Neue Updates von SUSE aufgenommen

4. 2026-09-22 #2

   Neue Updates von SUSE aufgenommen

5. 2026-09-07 #1

   Initiale Fassung

References

• GitHub Security Advisory GHSA-8pv5-2vvh-f478 vom 2026-09-07
  https://github.com/advisories/GHSA-8pv5-2vvh-f478
• SUSE Security Update SUSE-SU-2026:4278-1 vom 2026-09-22
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029351.html
• SUSE Security Update SUSE-SU-2026:23878-1 vom 2026-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029407.html
• SUSE Security Update SUSE-SU-2026:4363-1 vom 2026-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029436.html
• SUSE Security Update SUSE-SU-2026:23926-1 vom 2026-09-30
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029479.html