TPM GPIO reset vulnerability

[Kondix10]

Component

Dasharo firmware

Device

NovaCustom NS7x 11th Gen, NovaCustom NV4x 12th Gen

Dasharo version

v1.6.0-rc7 (NS7x), v1.8.0 (NV4x)

Dasharo Tools Suite version

v2.7.7

Test case ID

TPM015.201

Brief summary

TPM PCRs can be cleared using the TPM GPIO vulnerability. Issue is described in more detail here: linuxboot/heads#2165

How reproducible

100%

How to reproduce

• Go through test TPM015.201 from dasharo-security/tpm-support.robot
  OR
• Clone https://github.com/tlaurion/tpm-gpio-fail, build and run reset/tpm-gpio-assert from Dasharo Tools Suite (Ubuntu might hang if PCRs are cleared)

Expected behavior

PCRs preserved, no vulnerability detected

Actual behavior

PCRs cleared

Screenshots

tpm-gpio-assert_ns70mu.log
tpm-gpio-assert_nv41pz.log

Additional context

No response

Solutions you've tried

No response