Keylime Project Keylime vulnerabilities

• keylime project keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 more Keylime: keylime: registrar allows identity takeover via duplicate uuid registration CVE-2025-13609 Fix available 8.2 HighNovember 24, 2025
• keylime, fedoraproject fedora, redhat enterprise linux +2 more Keylime: unhandled exceptions could lead to invalid attestation states CVE-2022-3500 Fix available 5.1 MediumOctober 28, 2022
• keylime keylime-agent-6.3.0-1.1 on GA media CVE-2022-23952 7.5 HighSeptember 21, 2022
• keylime keylime-agent-6.3.0-1.1 on GA media CVE-2022-23951 5.5 MediumSeptember 21, 2022
• keylime keylime-agent-6.3.0-1.1 on GA media CVE-2022-23950 7.5 HighSeptember 21, 2022
• keylime keylime-agent-6.3.0-1.1 on GA media CVE-2022-23949 7.5 HighSeptember 21, 2022
• keylime keylime-agent-6.3.0-1.1 on GA media CVE-2021-43310 9.8 CriticalSeptember 21, 2022
• keylime keylime-agent-6.3.0-1.1 on GA media CVE-2022-23948 7.5 HighSeptember 21, 2022
• keylime, fedoraproject fedora +1 more Tenant and Verifier might not use the same registrar data CVE-2022-1053 Fix available 9.1 CriticalMay 5, 2022
• keylime, fedoraproject fedora +1 more A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations. CVE-2021-3406 9.8 CriticalFebruary 25, 2021