Back Linuxsecurity

Fedora 42: libtpms Important CVE-2026

Linuxsecurity •LinuxSecurity Advisories • January 18, 2026

A library providing TPM functionality for VMs. Targeted for integration into Qemu. Update Information : Upgrade to libtpms 0.10.2 fixing CVE-2026-21444

A library providing TPM functionality for VMs. Targeted for integration

Upgrade to libtpms 0.10.2 fixing CVE-2026-21444

* Fri Jan 2 2026 Stefan Berger - 0.10.2-1 - Upgrade to libtpms 0.10.2 fixing CVE-2026-21444

[ 1 ] Bug #2426838 - CVE-2026-21444 libtpms: return of wrong initialization vector when certain symmetric ciphers are used

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-14ecf2c0cd' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora libtpms Update Addresses CVE-2026-21444 An important update for the libtpms library, which provides TPM functionality for virtual machines, has been released to address CVE-2026-21444. Users are advised to upgrade to libtpms version 0.10.2 to mitigate potential vulnerabilities. The update was announced by Stefan Berger on January 2, 2026. 2 sources 18

Extracted Entities

CVEs (1)

CVE-2026-21444