Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss prior to 3.0.1 and prior to 2.4.3.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
tpm2 software stack project tpm2 software stack |
||
fedoraproject fedora 34 |