CVE-2022-50389
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv…
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/08fd965521d0e172d540cf945517810895fcb199Patch
- https://git.kernel.org/stable/c/0bd9b4be721c776f77adcaf34105dfca3007ddb9Patch
- https://git.kernel.org/stable/c/1af2232b13837ce0f3a082b9f43735b09aafc367Patch
- https://git.kernel.org/stable/c/2fcd3dc8b97a14f1672729c86b7041a1a89b052aPatch
- https://git.kernel.org/stable/c/37e90c374dd11cf4919c51e847c6d6ced0abc555Patch
- https://git.kernel.org/stable/c/927860dfa161ae8392a264197257dbdc52b26b0fPatch
- https://git.kernel.org/stable/c/986cd9a9b95423e35a2cbb8e9105aec0e0d7f337Patch
- https://git.kernel.org/stable/c/b0785edaf649e5f04dc7f75533e810f4c00e4106Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.