CVE-2026-6727
CVE-2026-6727
CVE-2026-6727 is a medium vulnerability (CVSS 5.9) in Trusted Computing Group Tpm2.0, published August 11, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. No source names a fixed version.
- Severity
- 5.9 MediumCVSS 3.1, CVE List
- Exploit chance
- 0.15%EPSS, 4th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
Discussion
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtpmsDebian:12 | All versions, plus listed versions 0.10.1-10.10.1-20.10.2-10.10.2-20.10.2-3 Show 6 moreShow less0.10.2-40.10.2-50.9.2-3.10.9.2-3.1+deb12u10.9.2-3.20.9.2-3.2+hurd.1 | None known |
libtpmsDebian:13 | All versions, plus listed versions 0.10.1-10.10.1-20.10.2-10.10.2-20.10.2-3 Show 4 moreShow less0.10.2-40.10.2-50.9.2-3.20.9.2-3.2+hurd.1 | None known |
libtpmsDebian:14 | All versions, plus listed versions 0.10.1-10.10.1-20.10.2-10.10.2-20.10.2-3 Show 4 moreShow less0.10.2-40.10.2-50.9.2-3.20.9.2-3.2+hurd.1 | None known |
libtpmsUbuntu:22.04:LTS | All versions, plus listed versions 0.8.2-1ubuntu10.9.0-0ubuntu10.9.0-0ubuntu20.9.0-0ubuntu30.9.0-0ubuntu40.9.3-0ubuntu10.9.3-0ubuntu1.22.04.10.9.3-0ubuntu1.22.04.2 | None known |
libtpmsUbuntu:24.04:LTS | All versions, plus listed versions 0.9.3-0ubuntu20.9.3-0ubuntu30.9.3-0ubuntu40.9.3-0ubuntu4.24.04.1 | None known |
libtpmsUbuntu:26.10 | All versions, plus listed versions 0.10.2-2ubuntu10.10.2-2ubuntu20.10.2-5ubuntu1 | None known |
libtpmsUbuntu:26.04:LTS | All versions, plus listed versions 0.9.3-0ubuntu50.10.1-2ubuntu10.10.2-1ubuntu10.10.2-2ubuntu1 | None known |
What each source reports
CVE List Score used
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
- Record
CVE-2026-6727- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-208
- Updated
- 2026-11-02
EUVDEUVD-2026-56223
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
- Record
EUVD-2026-56223- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fv5r-gp2c-7mwv
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A...
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
- Record
GHSA-fv5r-gp2c-7mwv- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-208
- Updated
- 2026-11-02
NVD
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
- Record
CVE-2026-6727- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-208
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
- Record
DEBIAN-CVE-2026-6727- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
- Record
UBUNTU-CVE-2026-6727- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
trustedcomputinggroup.org/about/security
nvd.nist.gov/vuln/detail/CVE-2026-6727
github.com/advisories/GHSA-fv5r-gp2c-7mwv
security-tracker.debian.org/tracker/CVE-2026-6727
ubuntu.com/security/CVE-2026-6727
cve.org/CVERecord?id=CVE-2026-6727
groups.google.com/g/libtpms-announce/c/xB2PqSQRA_8