CVE-2022-50389 (GCVE-0-2022-50389)
Vulnerability from cvelistv5
Published
2025-09-18 13:33
Modified
2026-01-14 18:53
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.
References
Impacted products
Vendor Product Version
Linux Linux Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
Version: 30fc8d138e9123f374a3c3867e7c7c5cd4004941
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-50389",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:49:57.718676Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-401",
                "description": "CWE-401 Missing Release of Memory after Effective Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T18:53:05.136Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/char/tpm/tpm_crb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "08fd965521d0e172d540cf945517810895fcb199",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "1af2232b13837ce0f3a082b9f43735b09aafc367",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "927860dfa161ae8392a264197257dbdc52b26b0f",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "0bd9b4be721c776f77adcaf34105dfca3007ddb9",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "986cd9a9b95423e35a2cbb8e9105aec0e0d7f337",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "2fcd3dc8b97a14f1672729c86b7041a1a89b052a",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "b0785edaf649e5f04dc7f75533e810f4c00e4106",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            },
            {
              "lessThan": "37e90c374dd11cf4919c51e847c6d6ced0abc555",
              "status": "affected",
              "version": "30fc8d138e9123f374a3c3867e7c7c5cd4004941",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/char/tpm/tpm_crb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.0"
            },
            {
              "lessThan": "4.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.87",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.303",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.163",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.87",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.17",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.3",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak\n\nIn crb_acpi_add(), we get the TPM2 table to retrieve information\nlike start method, and then assign them to the priv data, so the\nTPM2 table is not used after the init, should be freed, call\nacpi_put_table() to fix the memory leak."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-18T13:33:09.322Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/08fd965521d0e172d540cf945517810895fcb199"
        },
        {
          "url": "https://git.kernel.org/stable/c/1af2232b13837ce0f3a082b9f43735b09aafc367"
        },
        {
          "url": "https://git.kernel.org/stable/c/927860dfa161ae8392a264197257dbdc52b26b0f"
        },
        {
          "url": "https://git.kernel.org/stable/c/0bd9b4be721c776f77adcaf34105dfca3007ddb9"
        },
        {
          "url": "https://git.kernel.org/stable/c/986cd9a9b95423e35a2cbb8e9105aec0e0d7f337"
        },
        {
          "url": "https://git.kernel.org/stable/c/2fcd3dc8b97a14f1672729c86b7041a1a89b052a"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0785edaf649e5f04dc7f75533e810f4c00e4106"
        },
        {
          "url": "https://git.kernel.org/stable/c/37e90c374dd11cf4919c51e847c6d6ced0abc555"
        }
      ],
      "title": "tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50389",
    "datePublished": "2025-09-18T13:33:09.322Z",
    "dateReserved": "2025-09-17T14:53:06.997Z",
    "dateUpdated": "2026-01-14T18:53:05.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-50389\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T18:49:57.718676Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-401\", \"description\": \"CWE-401 Missing Release of Memory after Effective Lifetime\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T18:49:53.742Z\"}}], \"cna\": {\"title\": \"tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"08fd965521d0e172d540cf945517810895fcb199\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"1af2232b13837ce0f3a082b9f43735b09aafc367\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"927860dfa161ae8392a264197257dbdc52b26b0f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"0bd9b4be721c776f77adcaf34105dfca3007ddb9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"986cd9a9b95423e35a2cbb8e9105aec0e0d7f337\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"2fcd3dc8b97a14f1672729c86b7041a1a89b052a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"b0785edaf649e5f04dc7f75533e810f4c00e4106\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30fc8d138e9123f374a3c3867e7c7c5cd4004941\", \"lessThan\": \"37e90c374dd11cf4919c51e847c6d6ced0abc555\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/char/tpm/tpm_crb.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.14.303\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.270\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.229\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.163\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.87\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.0.17\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.2\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/char/tpm/tpm_crb.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/08fd965521d0e172d540cf945517810895fcb199\"}, {\"url\": \"https://git.kernel.org/stable/c/1af2232b13837ce0f3a082b9f43735b09aafc367\"}, {\"url\": \"https://git.kernel.org/stable/c/927860dfa161ae8392a264197257dbdc52b26b0f\"}, {\"url\": \"https://git.kernel.org/stable/c/0bd9b4be721c776f77adcaf34105dfca3007ddb9\"}, {\"url\": \"https://git.kernel.org/stable/c/986cd9a9b95423e35a2cbb8e9105aec0e0d7f337\"}, {\"url\": \"https://git.kernel.org/stable/c/2fcd3dc8b97a14f1672729c86b7041a1a89b052a\"}, {\"url\": \"https://git.kernel.org/stable/c/b0785edaf649e5f04dc7f75533e810f4c00e4106\"}, {\"url\": \"https://git.kernel.org/stable/c/37e90c374dd11cf4919c51e847c6d6ced0abc555\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ntpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak\\n\\nIn crb_acpi_add(), we get the TPM2 table to retrieve information\\nlike start method, and then assign them to the priv data, so the\\nTPM2 table is not used after the init, should be freed, call\\nacpi_put_table() to fix the memory leak.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.303\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.270\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.229\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.163\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.87\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.17\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.3\", \"versionStartIncluding\": \"4.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2\", \"versionStartIncluding\": \"4.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-09-18T13:33:09.322Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-50389\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-14T18:53:05.136Z\", \"dateReserved\": \"2025-09-17T14:53:06.997Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-18T13:33:09.322Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.