CVE-2024-29038

Name of the Vulnerable Software and Affected Versions tpm2-tools versions prior to 5.7

Description The issue allows a malicious attacker to generate arbitrary quote data that is not detected by tpm2 checkquote. This is related to the Trusted Platform Module (TPM2.0) tools.

Recommendations For versions prior to 5.7, update to version 5.7 to resolve the issue. As a temporary workaround, consider restricting the use of the tpm2 checkquote function until the update is applied.