Back Linuxsecurity

Fedora 44 Keylime Major Security Update Addresses CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 7, 2026

Updating for Keylime release v7.14.2: This includes the fix for CVE-2026-6420. Update keylime-selinux policy to the latest version 44.1.0

* Wed May 27 2026 Anderson Toshiyuki Sasaki - 7.14.2-1 - Updating for Keylime release v7.14.2 - This includes the fix for CVE-2026-6420. - Update keylime-selinux policy to the latest version 44.1.0

[ 1 ] Bug #2467277 - keylime-7.14.2 is available [ 2 ] Bug #2467584 - CVE-2026-6420 keylime: Keylime: Security bypass due to hardcoded TPM quote nonce [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9064cdf8ef' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Bypass in Fedora Keylime Affects Multiple Versions Fedora has released a critical update for Keylime version 7.14.2 to address CVE-2026-6420, a security bypass vulnerability caused by a hardcoded TPM quote nonce. This flaw affects users of Fedora 43 and 44, potentially allowing unauthorized access to sensitive data. The vulnerability was published on May 6, 2026, and has been confirmed to impact the keylime-selinux policy. Users are advised to upgrade to the latest version (44.1.0) to mitigate risks. The update can be installed using the 'dnf' package manager. As of June 7, 2026, no active exploitation has been reported, but the severity of the vulnerability necessitates immediate attention from system administrators. 2 sources 71

Extracted Entities

CVEs (1)

CVE-2026-6420

CWE Weaknesses (1)

CWE-287 - Improper Authentication