Wind River Support Network

Not to be fixed

LIN1021-6795 : Security Advisory - swtpm - CVE-2020-28407

Created: Nov 5, 2023    Updated: Nov 29, 2023
Resolved Date: Nov 24, 2023
Found In Version:
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace


In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.

CREATE(Triage):(User=admin) CVE-2020-28407 (
Live chat