Mageia 2023-0102: libtpms security update

Web: https://www.linuxsecurity.com/advisories/mageia/mageia-2023-0102-libtpms-security-update-d0ncx8snnzoj?rss

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in

linux linux security mageia security security update update