CVE-2024-29039 Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state
Attackers can manipulate TPM state verification by altering PCR inputs, leading to misleading digest mappings and potential security bypasses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-29039?
CVE-2024-29039 is a critical vulnerability in tpm2-software tpm2-tools, published on 28 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped to PCR slots and banks, providing a misleading picture of the TPM state. This issue has been patched in version 5.7.
Weakness: CWE-807
Which versions are affected by CVE-2024-29039?
It affects 1 product.
Products include Tpm2-Tools Project Tpm2-Tools.
How do I fix CVE-2024-29039?
Upgrade to a fixed version.
Is CVE-2024-29039 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-29039 exists.
Other vulnerabilities in tpm2-software tpm2-tools
Sources
Also known as AZL-43015, AZL-43021, CLSA-2025-1764614196, DEBIAN-CVE-2024-29039, GHSA-8rjm-5f5f-h4q6, UBUNTU-CVE-2024-29039.