Also, it's a twofer with the GreenPlasma zero-day local privilege escalation.
Apparently, not even TPM+PIN is safe from YellowKey.