Mutable Attestation or Measurement Reporting Data in tpm2-tools - CVE-2024-29038

Vulnerability identifier: #VU96646

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-29038

CWE-ID: CWE-1283

Exploitation vector: Local access

Exploit availability: No public exploit available

Affected software:
tpm2-tools
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Basesystem Module
openSUSE Leap
openEuler
Fedora
tpm2-tss
tpm2-tools-help
tpm2-tools
tpm2-tools-debuginfo
tpm2-tools-debugsource
tpm2-tools (Red Hat package)
tpm2.0-tools-debuginfo
tpm2.0-tools
tpm2.0-tools-debugsource

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to improper input validation. A local user can generate arbitrary quote data which is not detected by tpm2 checkquote and gain access to sensitive information.

Install updates from vendor's website.

• https://github.com/tpm2-software/tpm2-tools/security/advisories/GHSA-5495-c38w-gr6f
• https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7