Description
Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | tboot | 1:1.8.2-1.el7 | RHBA-2015:0584 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | tboot | 20120115_1.7.0-0.5.5.1 | SUSE-SU-2017:3114-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 11 SP4 | tboot | 20120115_1.7.0-0.5.5.1 | SUSE-SU-2017:3114-1 |
Advisories 2
- SUSE-SU-2017:3114-1 Recommended update for tboot SUSE / openSUSE Security Updates · Feb 4, 2026
- RHBA-2015:0584 Red Hat Bug Fix Advisory: tboot bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- http://www.securityfocus.com/bid/68960
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95063
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136768.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136778.html
- http://www.openwall.com/lists/oss-security/2014/07/30/4