Improper access control in keylime - CVE-2022-1053
Published: May 4, 2022 / Updated: May 7, 2026
Vulnerability identifier: #VU130482
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-1053
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass TPM-based attestation validation.
The vulnerability exists due to improper access control in registrar data handling when validating the EK and identity quote and validating the integrity quote. A remote attacker can provide mismatched AK and EK data to bypass TPM-based attestation validation.
The issue can break the chain of trust because the verifier may use an AK that was not validated, and exploitation is easier when validation occurs before the agent is added to the verifier.
Affected software
keylime
Fedora
keylime
Fedora
keylime
How to mitigate CVE-2022-1053
Install security update from vendor's website.
keylime - update to 6.4.0
keylime - addressed in versions 6.4.0-1.fc34, 6.4.0-1.fc35, 6.4.0-1.fc36
keylime - addressed in versions 6.4.0-1.fc34, 6.4.0-1.fc35, 6.4.0-1.fc36