Description
Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs in the ‘CryptHmacSign’ function with an inconsistent pairing of the signKey and signScheme parameters, where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is in the ‘CryptHmacSign’ function, which is defined in the "Part 4: Supporting Routines – Code" document, section "7.151 - /tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered from user-mode applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| stefanberger | libtpms | = 0.7.11, = 0.8.9, = 0.9.6, = 0.10.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libtpms | 0.9.2-3.2 | — |
| Debian 13 | libtpms | 0.9.2-3.2 | — |
| Debian 12 | libtpms | 0.9.2-3.1+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | libtpms | 0.9.3-0ubuntu4.24.04.1 | USN-7617-1 |
| Ubuntu 22.04 LTS | libtpms | 0.9.3-0ubuntu1.22.04.2 | USN-7617-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | libtpms | 0.9.6-11.el10_0 | RHSA-2025:16428 |
| RHEL 9 | libtpms | 0.9.1-5.20211126git1ff6fe1f43.el9_6 | RHSA-2025:12100 |
| RHEL 8 | SLOF | 20210217-2.module+el8.10.0+20141+6faa2812 | RHSA-2025:12527 |
| RHEL 8 | hivex +6 | 1.3.18-23.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | libguestfs-winsupport | 8.10-1.module+el8.10.0+19908+9938c7c9 | RHSA-2025:12527 |
| RHEL 8 | libiscsi +2 | 1.18.0-8.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | libnbd +6 | 1.6.0-6.module+el8.10.0+22250+3c790083 | RHSA-2025:12527 |
| RHEL 8 | libtpms +1 | 0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+23348+204cfc70 | RHSA-2025:12527 |
| RHEL 8 | libvirt +27 | 8.0.0-23.4.module+el8.10.0+23205+d8da55c1 | RHSA-2025:12527 |
| RHEL 8 | libvirt-dbus | 1.3.0-2.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | libvirt-python +1 | 8.0.0-2.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | nbdkit +18 | 1.24.0-5.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | netcf +2 | 0.2.8-12.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | perl-Sys-Virt | 8.0.0-1.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | qemu-img +14 | 15:6.2.0-53.module+el8.10.0+23081+c18b1ee3.4 | RHSA-2025:12527 |
| RHEL 8 | seabios +2 | 1.16.0-4.module+el8.9.0+19570+14a90618 | RHSA-2025:12527 |
| RHEL 8 | sgabios +1 | 1:0.20170427git-3.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | supermin +1 | 5.2.1-2.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | swtpm +4 | 0.7.0-4.20211109gitb79fd91.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | virt-dib +24 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
| RHEL 8 | virt-v2v +3 | 1:1.42.0-22.module+el8.9.0+18724+20190c23 | RHSA-2025:12527 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | libtpms | 0.9.1-5.20211126git1ff6fe1f43.el9_4 | RHSA-2025:12111 |
| RHEL 9.2 E4S | libtpms | 0.9.1-5.20211126git1ff6fe1f43.el9_2 | RHSA-2025:12112 |
| RHEL 8.8 TUS | hivex +3 | 1.3.18-23.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libguestfs +20 | 1:1.44.0-9.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libguestfs-winsupport | 8.8-2.module+el8.8.0+19817+dd5e62f6 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libiscsi +2 | 1.18.0-8.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libnbd +4 | 1.6.0-5.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libtpms +1 | 0.9.1-3.20211126git1ff6fe1f43.module+el8.8.0+23328+ce46509e | RHSA-2025:12293 |
| RHEL 8.8 TUS | libvirt +27 | 8.0.0-19.2.module+el8.8.0+18944+7f5acf75 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libvirt-dbus | 1.3.0-2.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | libvirt-python +1 | 8.0.0-2.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | nbdkit +18 | 1.24.0-5.module+el8.8.0+17308+05924798 | RHSA-2025:12293 |
| RHEL 8.8 TUS | netcf +2 | 0.2.8-12.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | perl-Sys-Virt | 8.0.0-1.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 TUS | qemu-img +9 | 15:6.2.0-33.module+el8.8.0+22376+d8cc0e0c.6 | RHSA-2025:12293 |
| RHEL 8.8 E4S | SLOF | 20210217-2.module+el8.8.0+20737+daad9f3b | RHSA-2025:12293 |
| RHEL 8.8 E4S | hivex +4 | 1.3.18-23.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | libguestfs-winsupport | 8.8-2.module+el8.8.0+19817+dd5e62f6 | RHSA-2025:12293 |
| RHEL 8.8 E4S | libiscsi +2 | 1.18.0-8.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | libnbd +4 | 1.6.0-5.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | libtpms +1 | 0.9.1-3.20211126git1ff6fe1f43.module+el8.8.0+23328+ce46509e | RHSA-2025:12293 |
| RHEL 8.8 E4S | libvirt +27 | 8.0.0-19.2.module+el8.8.0+18944+7f5acf75 | RHSA-2025:12293 |
| RHEL 8.8 E4S | libvirt-dbus | 1.3.0-2.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | libvirt-python +1 | 8.0.0-2.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | nbdkit +18 | 1.24.0-5.module+el8.8.0+17308+05924798 | RHSA-2025:12293 |
| RHEL 8.8 E4S | netcf +2 | 0.2.8-12.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | perl-Sys-Virt | 8.0.0-1.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | qemu-img +13 | 15:6.2.0-33.module+el8.8.0+22376+d8cc0e0c.6 | RHSA-2025:12293 |
| RHEL 8.8 E4S | seabios +2 | 1.16.0-4.module+el8.8.0+19627+2d14cb21 | RHSA-2025:12293 |
| RHEL 8.8 E4S | sgabios +1 | 1:0.20170427git-3.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | supermin +1 | 5.2.1-2.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | swtpm +4 | 0.7.0-4.20211109gitb79fd91.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | virt-dib +22 | 1:1.44.0-9.module+el8.8.0+16781+9f4724c2 | RHSA-2025:12293 |
| RHEL 8.8 E4S | virt-v2v +3 | 1:1.42.0-22.module+el8.8.0+19067+b66cdac6 | RHSA-2025:12293 |
| RHEL 8.6 E4S | SLOF | 20210217-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | hivex +3 | 1.3.18-23.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | libguestfs +20 | 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | libguestfs-winsupport | 8.6-2.module+el8.6.0+19818+47334628 | RHSA-2025:12234 |
| RHEL 8.6 E4S | libiscsi +2 | 1.18.0-8.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | libnbd +4 | 1.6.0-5.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | libtpms +1 | 0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55 | RHSA-2025:12234 |
| RHEL 8.6 E4S | libvirt +27 | 8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3 | RHSA-2025:12234 |
| RHEL 8.6 E4S | libvirt-dbus | 1.3.0-2.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | libvirt-python +1 | 8.0.0-1.1.module+el8.6.0+16381+3abc475c | RHSA-2025:12234 |
| RHEL 8.6 E4S | nbdkit +18 | 1.24.0-4.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | netcf +2 | 0.2.8-12.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | perl-Sys-Virt | 8.0.0-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 E4S | qemu-img +9 | 15:6.2.0-11.module+el8.6.0+22377+8840c53e.15 | RHSA-2025:12234 |
| RHEL 8.6 AUS | hivex +4 | 1.3.18-23.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | libguestfs-winsupport | 8.6-2.module+el8.6.0+19818+47334628 | RHSA-2025:12234 |
| RHEL 8.6 AUS | libiscsi +2 | 1.18.0-8.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | libnbd +4 | 1.6.0-5.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | libtpms +1 | 0.9.1-2.20211126git1ff6fe1f43.module+el8.6.0+23331+44040c55 | RHSA-2025:12234 |
| RHEL 8.6 AUS | libvirt +27 | 8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3 | RHSA-2025:12234 |
| RHEL 8.6 AUS | libvirt-dbus | 1.3.0-2.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | libvirt-python +1 | 8.0.0-1.1.module+el8.6.0+16381+3abc475c | RHSA-2025:12234 |
| RHEL 8.6 AUS | nbdkit +18 | 1.24.0-4.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | netcf +2 | 0.2.8-12.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | perl-Sys-Virt | 8.0.0-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | qemu-img +13 | 15:6.2.0-11.module+el8.6.0+22377+8840c53e.15 | RHSA-2025:12234 |
| RHEL 8.6 AUS | seabios +2 | 1.15.0-2.module+el8.6.0+19580+39804e41.1 | RHSA-2025:12234 |
| RHEL 8.6 AUS | sgabios +1 | 1:0.20170427git-3.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | supermin +1 | 5.2.1-1.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | swtpm +4 | 0.7.0-3.20211109gitb79fd91.module+el8.6.0+16156+d5629340 | RHSA-2025:12234 |
| RHEL 8.6 AUS | virt-dib +22 | 1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f | RHSA-2025:12234 |
| RHEL 8.6 AUS | virt-v2v +3 | 1:1.42.0-19.module+el8.6.0+15577+2ffd6ffa | RHSA-2025:12234 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | libtpms | 0.9.6-11.el10_0 | ALSA-2025:16428 |
| AlmaLinux 9 | libtpms | 0.9.1-5.20211126git1ff6fe1f43.el9_6 | ALSA-2025:12100 |
| AlmaLinux 8 | SLOF | 20210217-2.module_el8.10.0+3768+dfd76e10 | ALSA-2025:12527 |
| AlmaLinux 8 | hivex +6 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 | ALSA-2025:12527 |
| AlmaLinux 8 | libguestfs-winsupport | 8.10-1.module_el8.10.0+3768+dfd76e10 | ALSA-2025:12527 |
| AlmaLinux 8 | libiscsi +2 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | ALSA-2025:12527 |
| AlmaLinux 8 | libnbd +6 | 1.6.0-6.module_el8.10.0+3897+eb84924d | ALSA-2025:12527 |
| AlmaLinux 8 | libtpms +1 | 0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654 | ALSA-2025:12527 |
| AlmaLinux 8 | libvirt +27 | 8.0.0-23.4.module_el8.10.0+4031+06966654 | ALSA-2025:12527 |
| AlmaLinux 8 | libvirt-dbus | 1.3.0-2.module_el8.6.0+2880+7d9e3703 | ALSA-2025:12527 |
| AlmaLinux 8 | nbdkit +18 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 | ALSA-2025:12527 |
| AlmaLinux 8 | netcf +2 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 | ALSA-2025:12527 |
| AlmaLinux 8 | perl-Sys-Virt | 8.0.0-1.module_el8.6.0+2880+7d9e3703 | ALSA-2025:12527 |
| AlmaLinux 8 | python3-libvirt | 8.0.0-2.module_el8.7.0+3346+68867adb | ALSA-2025:12527 |
| AlmaLinux 8 | qemu-img +14 | 15:6.2.0-53.module_el8.10.0+4031+06966654.4 | ALSA-2025:12527 |
| AlmaLinux 8 | seabios +2 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 | ALSA-2025:12527 |
| AlmaLinux 8 | sgabios +1 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 | ALSA-2025:12527 |
| AlmaLinux 8 | supermin +1 | 5.2.1-2.module_el8.7.0+3346+68867adb | ALSA-2025:12527 |
| AlmaLinux 8 | swtpm +4 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb | ALSA-2025:12527 |
| AlmaLinux 8 | virt-dib +24 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma | ALSA-2025:12527 |
| AlmaLinux 8 | virt-v2v +3 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 | ALSA-2025:12527 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | libtpms | 0.9.6-11.el10_0 | RLSA-2025:16428 |
| Rocky Linux 9 | libtpms | 0.9.1-5.20211126git1ff6fe1f43.el9_6 | RLSA-2025:12100 |
| Rocky Linux 8 | hivex | 1.3.18-23.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | libguestfs | 1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky | RLSA-2025:12527 |
| Rocky Linux 8 | libguestfs-winsupport | 8.10-1.module+el8.10.0+1451+358d0d76 | RLSA-2025:12527 |
| Rocky Linux 8 | libiscsi | 1.18.0-8.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | libnbd | 1.6.0-6.module+el8.10.0+1870+0a714c9f | RLSA-2025:12527 |
| Rocky Linux 8 | libtpms | 0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+2014+5ad6bca0 | RLSA-2025:12527 |
| Rocky Linux 8 | libvirt | 8.0.0-23.4.module+el8.10.0+2015+baffef50 | RLSA-2025:12527 |
| Rocky Linux 8 | libvirt-dbus | 1.3.0-2.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | libvirt-python | 8.0.0-2.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | nbdkit | 1.24.0-5.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | netcf | 0.2.8-12.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | perl-Sys-Virt | 8.0.0-1.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | qemu-kvm | 5:6.2.0-53.module+el8.10.0+1870+0a714c9f | RLSA-2025:12527 |
| Rocky Linux 8 | seabios | 1.16.0-4.module+el8.9.0+1408+7b966129 | RLSA-2025:12527 |
| Rocky Linux 8 | sgabios | 1:0.20170427git-3.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | supermin | 5.2.1-2.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | swtpm | 0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
| Rocky Linux 8 | virt-v2v | 1:1.42.0-22.module+el8.10.0+1590+a67ab969 | RLSA-2025:12527 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | libtpms | 0.9.6-150600.3.3.1 | SUSE-SU-2026:1388-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | libtpms | 0.9.6-slfo.1.1_2.1 | SUSE-SU-2026:21035-1 |
| SLE Micro 6.0 | libtpms | 0.9.6-2.1 | SUSE-SU-2026:21064-1 |
| SLE Micro 5.5 | libtpms | 0.8.2-150300.3.12.1 | SUSE-SU-2026:4278-1 |
| SLE Micro 5.4 | libtpms | 0.8.2-150300.3.12.1 | SUSE-SU-2026:4278-1 |
| SLE Micro 5.3 | libtpms | 0.8.2-150300.3.12.1 | SUSE-SU-2026:4278-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libtpms | 0.10.1-1.1 | openSUSE-SU-2025:15244-1 |
| openSUSE Leap 15.6 | libtpms | 0.9.6-150600.3.3.1 | SUSE-SU-2026:1388-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | libtpms | 0.10.1-r0 | — |
| Alpine v3.23 | libtpms | 0.10.1-r0 | — |
| Alpine v3.22 | libtpms | 0.10.1-r0 | — |
| Alpine v3.20 | libtpms | 0.9.7-r0 | — |
| Alpine v3.19 | libtpms | 0.9.7-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | libtpms | 0.9.6-8 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | libtpms | 0.9.6-11.el10_0 | ELSA-2025-16428 |
| Oracle Linux 9 | libtpms | 0.9.1-5.20211126git1ff6fe1f43.el9_6 | ELSA-2025-12100 |
| Oracle Linux 8 | hivex +6 | 1.3.18-23.module+el8.9.0+90075+85334608 | ELSA-2025-12527 |
| Oracle Linux 8 | libguestfs-winsupport | 8.10-1.module+el8.10.0+90308+7c659588 | ELSA-2025-12527 |
| Oracle Linux 8 | libiscsi +2 | 1.18.0-8.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | libnbd +6 | 1.6.0-6.module+el8.10.0+90410+bcde3bf4 | ELSA-2025-12527 |
| Oracle Linux 8 | libtpms +1 | 0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90638+6d8ade84 | ELSA-2025-12527 |
| Oracle Linux 8 | libvirt +27 | 8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84 | ELSA-2025-12527 |
| Oracle Linux 8 | libvirt-dbus | 1.3.0-2.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | nbdkit +18 | 1.24.0-5.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | netcf +2 | 0.2.8-12.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | perl-Sys-Virt | 8.0.0-1.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | python3-libvirt | 8.0.0-2.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | qemu-img +14 | 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4 | ELSA-2025-12527 |
| Oracle Linux 8 | seabios +2 | 1.16.0-4.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | sgabios +1 | 1:0.20170427git-3.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | supermin +1 | 5.2.1-2.0.1.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | swtpm +4 | 0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | virt-dib +24 | 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
| Oracle Linux 8 | virt-v2v +3 | 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8 | ELSA-2025-12527 |
Advisories 24
- ALSA-2025:16428 Moderate: libtpms security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12100 Moderate: libtpms security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12527 Moderate: virt:rhel and virt-devel:rhel security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:4278-1 Security update for libtpms SUSE / openSUSE Security Updates · Sep 23, 2026
- WID-SEC-2025-1673 Red Hat Enterprise Linux (libtpms): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 22, 2026
- WID-SEC-2025-1669 Red Hat Enterprise Linux (libtpms): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 22, 2026
- RHSA-2025:16428 Red Hat Security Advisory: libtpms security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:12527 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:12293 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:12234 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:12112 Red Hat Security Advisory: libtpms security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:12111 Red Hat Security Advisory: libtpms security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:12100 Red Hat Security Advisory: libtpms security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- USN-7617-1 libtpms vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- SUSE-SU-2026:1388-1 Security update for libtpms SUSE / openSUSE Security Updates · Apr 17, 2026
- SUSE-SU-2026:21064-1 Security update for libtpms SUSE / openSUSE Security Updates · Apr 14, 2026
- SUSE-SU-2026:21035-1 Security update for libtpms SUSE / openSUSE Security Updates · Apr 14, 2026
- openSUSE-SU-2025:15244-1 libtpms-devel-0.10.1-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- RLSA-2025:12100 Moderate: libtpms security update Rocky Linux Security Advisories · Oct 7, 2025
- RLSA-2025:16428 Moderate: libtpms security update Rocky Linux Security Advisories · Oct 3, 2025
- ELSA-2025-16428 Moderate: libtpms security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 23, 2025
- RLSA-2025:12527 Moderate: virt:rhel and virt-devel:rhel security update Rocky Linux Security Advisories · Sep 8, 2025
- ELSA-2025-12527 Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 4, 2025
- ELSA-2025-12100 Moderate: libtpms security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 29, 2025
References
- https://github.com/stefanberger/libtpms/security/advisories/GHSA-25w5-6fjj-hf8g
- https://github.com/stefanberger/libtpms/commit/04b2d8e9afc0a9b6bffe562a23e58c0de11532d1
- https://trustedcomputinggroup.org/resource/tpm-library-specification
- https://trustedcomputinggroup.org/wp-content/uploads/TPM-2.0-1.83-Part-4-Supporting-Routines-Code.pdf