Skip to content
OpenAdvisories
High · 7.5 CVE-2022-23948 EUVD-2022-28864

A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previously create…

Published Sep 21, 2022 · Updated May 29, 2025 · Assigned by fedora

Description

A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previously created unprivileged mounts allowing secrets to be leaked to other processes on the host.

Affected products

VendorProductAffectedFixed
— keylime keylime 6.3.0 —

References