CVE-2025-13609 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-13609 Interim 1 2 2026-03-05T01:25:11Z current 2025-12-23T00:48:48Z 2026-03-05T01:25:11Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-13609 A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-December/023547.html E-Mail link for SUSE-SU-2025:21194-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023868.html E-Mail link for SUSE-SU-2026:0217-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 openSUSE Leap 16.0 openSUSE Tumbleweed keylime keylime-agent keylime-agent-6.3.2-150400.4.23.1 keylime-config keylime-config-6.3.2-150400.4.23.1 keylime-config-7.13.0+40-1.1 keylime-config-7.13.0+40-160000.1.1 keylime-firewalld keylime-firewalld-6.3.2-150400.4.23.1 keylime-firewalld-7.13.0+40-1.1 keylime-firewalld-7.13.0+40-160000.1.1 keylime-logrotate keylime-logrotate-6.3.2-150400.4.23.1 keylime-logrotate-7.13.0+40-1.1 keylime-logrotate-7.13.0+40-160000.1.1 keylime-registrar keylime-registrar-6.3.2-150400.4.23.1 keylime-registrar-7.13.0+40-1.1 keylime-registrar-7.13.0+40-160000.1.1 keylime-tenant-7.13.0+40-1.1 keylime-tenant-7.13.0+40-160000.1.1 keylime-tpm_cert_store keylime-tpm_cert_store-6.3.2-150400.4.23.1 keylime-tpm_cert_store-7.13.0+40-1.1 keylime-tpm_cert_store-7.13.0+40-160000.1.1 keylime-verifier keylime-verifier-6.3.2-150400.4.23.1 keylime-verifier-7.13.0+40-1.1 keylime-verifier-7.13.0+40-160000.1.1 python3-keylime python3-keylime-6.3.2-150400.4.23.1 python311-keylime-7.13.0+40-1.1 python312-keylime-7.13.0+40-1.1 python313-keylime-7.13.0+40-1.1 python313-keylime-7.13.0+40-160000.1.1 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS keylime-config-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-firewalld-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-logrotate-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-registrar-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-tenant-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-tpm_cert_store-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-verifier-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 python313-keylime-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 keylime-config-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-firewalld-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-logrotate-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-registrar-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-tenant-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-tpm_cert_store-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-verifier-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python313-keylime-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Manager Proxy LTS 4.3 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 keylime-agent-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-config-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-firewalld-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-logrotate-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-registrar-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-verifier-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 python3-keylime-6.3.2-150400.4.23.1 as a component of SUSE Manager Server LTS 4.3 keylime-agent-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-config-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-firewalld-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-logrotate-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-registrar-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-tpm_cert_store-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-verifier-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 python3-keylime-6.3.2-150400.4.23.1 as a component of openSUSE Leap 15.6 keylime-config-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-firewalld-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-logrotate-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-registrar-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-tenant-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-tpm_cert_store-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-verifier-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 python313-keylime-7.13.0+40-160000.1.1 as a component of openSUSE Leap 16.0 keylime-config-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-firewalld-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-logrotate-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-registrar-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-tenant-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-tpm_cert_store-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-verifier-7.13.0+40-1.1 as a component of openSUSE Tumbleweed python311-keylime-7.13.0+40-1.1 as a component of openSUSE Tumbleweed python312-keylime-7.13.0+40-1.1 as a component of openSUSE Tumbleweed python313-keylime-7.13.0+40-1.1 as a component of openSUSE Tumbleweed keylime-config-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-firewalld-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-logrotate-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-registrar-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-tenant-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-tpm_cert_store-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-verifier-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 python313-keylime-7.13.0+40-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0 keylime-agent as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-config as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-firewalld as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-logrotate as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-registrar as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-tpm_cert_store as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime-verifier as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 python3-keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 keylime as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls. CVE-2025-13609 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-LTSS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP5-LTSS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 15 SP6-LTSS:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server 16.0:keylime-config-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-firewalld-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-logrotate-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-registrar-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-tenant-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-tpm_cert_store-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-verifier-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:python313-keylime-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-agent-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-config-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-registrar-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:keylime-verifier-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:python3-keylime-6.3.2-150400.4.23.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-config-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-firewalld-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-logrotate-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-registrar-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-tenant-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-tpm_cert_store-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:keylime-verifier-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server for SAP applications 16.0:python313-keylime-7.13.0+40-160000.1.1 SUSE Manager Proxy LTS 4.3:keylime-agent-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:keylime-config-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:keylime-registrar-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:keylime-verifier-6.3.2-150400.4.23.1 SUSE Manager Proxy LTS 4.3:python3-keylime-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-agent-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-config-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-registrar-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:keylime-verifier-6.3.2-150400.4.23.1 SUSE Manager Retail Branch Server LTS 4.3:python3-keylime-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-agent-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-config-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-firewalld-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-logrotate-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-registrar-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-tpm_cert_store-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:keylime-verifier-6.3.2-150400.4.23.1 SUSE Manager Server LTS 4.3:python3-keylime-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-agent-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-config-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-firewalld-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-logrotate-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-registrar-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-tpm_cert_store-6.3.2-150400.4.23.1 openSUSE Leap 15.6:keylime-verifier-6.3.2-150400.4.23.1 openSUSE Leap 15.6:python3-keylime-6.3.2-150400.4.23.1 openSUSE Leap 16.0:keylime-config-7.13.0+40-160000.1.1 openSUSE Leap 16.0:keylime-firewalld-7.13.0+40-160000.1.1 openSUSE Leap 16.0:keylime-logrotate-7.13.0+40-160000.1.1 openSUSE Leap 16.0:keylime-registrar-7.13.0+40-160000.1.1 openSUSE Leap 16.0:keylime-tenant-7.13.0+40-160000.1.1 openSUSE Leap 16.0:keylime-tpm_cert_store-7.13.0+40-160000.1.1 openSUSE Leap 16.0:keylime-verifier-7.13.0+40-160000.1.1 openSUSE Leap 16.0:python313-keylime-7.13.0+40-160000.1.1 openSUSE Tumbleweed:keylime-config-7.13.0+40-1.1 openSUSE Tumbleweed:keylime-firewalld-7.13.0+40-1.1 openSUSE Tumbleweed:keylime-logrotate-7.13.0+40-1.1 openSUSE Tumbleweed:keylime-registrar-7.13.0+40-1.1 openSUSE Tumbleweed:keylime-tenant-7.13.0+40-1.1 openSUSE Tumbleweed:keylime-tpm_cert_store-7.13.0+40-1.1 openSUSE Tumbleweed:keylime-verifier-7.13.0+40-1.1 openSUSE Tumbleweed:python311-keylime-7.13.0+40-1.1 openSUSE Tumbleweed:python312-keylime-7.13.0+40-1.1 openSUSE Tumbleweed:python313-keylime-7.13.0+40-1.1 SUSE Linux Enterprise Server 16.0:keylime-config-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-firewalld-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-logrotate-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-registrar-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-tenant-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-tpm_cert_store-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:keylime-verifier-7.13.0+40-160000.1.1 SUSE Linux Enterprise Server 16.0:python313-keylime-7.13.0+40-160000.1.1 critical 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H