CVE-2026-21444

Name	CVE-2026-21444
Description	libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1124557

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libtpms (PTS)	bookworm	0.9.2-3.1+deb12u1	fixed
	bookworm (security)	0.9.2-3.1~deb12u1	fixed
	trixie	0.9.2-3.2	fixed
	forky, sid	0.10.1-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
libtpms	source	bookworm	(not affected)
libtpms	source	trixie	(not affected)
libtpms	source	(unstable)	(unfixed)	1124557

Notes

[trixie] - libtpms <not-affected> (Vulnerable code introduced later)
[bookworm] - libtpms <not-affected> (Vulnerable code introduced later)
https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f
https://github.com/stefanberger/libtpms/issues/541
Introduced with: https://github.com/stefanberger/libtpms/commit/d08b929dede77bee05bd674d48c7a0548528ca9c (v0.10.0-rc1)
Fixed by: https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a (v0.10.2)