Description
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | TPM2 source | before 3.01, before 2.4.3 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tpm2-tss | 3.0.1-1 | — |
| Debian 13 | tpm2-tss | 3.0.1-1 | — |
| Debian 12 | tpm2-tss | 3.0.1-1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | tpm2-0-tss | 3.1.0-1.2 | openSUSE-SU-2024:11470-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | tpm2-tss | 2.4.6-1 | — |
Advisories 3
- WID-SEC-2026-0778 Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- openSUSE-SU-2024:11470-1 libtss2-esys0-3.1.0-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-3377 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025