CVE-2022-3500: Fedoraproject Fedora

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• Keylime Keylime: before 6.5.1 (fixed in 6.5.1)
• Red Hat Enterprise Linux: version 9.0 only

Published 2022-11-22. Last modified 2026-06-17.