CVE-2026-24882
Fixed in a distro release EPSS <1%CVSS 8.4
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
Products: gnupg, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | gnupg2 | 2.4.5-4.el10_1 |
| AlmaLinux 10 | gnupg2-smime | 2.4.5-4.el10_1 |
| Amazon Linux 2023 | gnupg2 | 2.3.7-1.amzn2023.0.7 |
| Amazon Linux 2023 | gnupg2-minimal | 2.3.7-1.amzn2023.0.7 |
| Amazon Linux 2023 | gnupg2-smime | 2.3.7-1.amzn2023.0.7 |
| Chainguard | gnupg | 2.4.9-r10 |
| Debian 13 | gnupg2 | no fix |
| Debian 14 | gnupg2 | 2.4.9-4 |
| Red Hat Enterprise Linux 10.1 | gnupg2 | 0:2.4.5-4.el10_1 |
| Red Hat Enterprise Linux 10.1 | gnupg2-debuginfo | 0:2.4.5-4.el10_1 |
| Red Hat Enterprise Linux 10.1 | gnupg2-debugsource | 0:2.4.5-4.el10_1 |
| Red Hat Enterprise Linux 10.1 | gnupg2-smime | 0:2.4.5-4.el10_1 |
| Red Hat Enterprise Linux 10.1 | gnupg2-smime-debuginfo | 0:2.4.5-4.el10_1 |
| Red Hat Enterprise Linux eus 10.0 | gnupg2 | 0:2.4.5-2.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | gnupg2-debuginfo | 0:2.4.5-2.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | gnupg2-debugsource | 0:2.4.5-2.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | gnupg2-smime | 0:2.4.5-2.el10_0.2 |
| Red Hat Enterprise Linux eus 10.0 | gnupg2-smime-debuginfo | 0:2.4.5-2.el10_0.2 |
| Rocky Linux 10 | gnupg2 | 0:2.4.5-4.el10_1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | gpg2 | 2.4.4-150600.3.15.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | gpg2 | 2.4.4-150600.3.15.1 |
| SUSE Linux Enterprise Server 16.0 | gpg2 | 2.5.5-160000.4.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | gpg2 | 2.4.4-150600.3.15.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | gpg2 | 2.5.5-160000.4.1 |
| SUSE Linux Micro 6.0 | gpg2 | 2.4.4-7.1 |
| SUSE Linux Micro 6.1 | gpg2 | 2.4.4-slfo.1.1_7.1 |
| SUSE Linux Micro 6.2 | gpg2 | 2.5.5-160000.4.1 |
| Wolfi | gnupg | 2.4.9-r10 |
| openSUSE Leap 15.6 | gpg2 | 2.4.4-150600.3.15.1 |
| openSUSE Leap 16.0 | gpg2 | 2.5.5-160000.4.1 |
| openSUSE Tumbleweed | gpg2 | 2.5.17-1.1 |