CVE-2022-50562
tpm: acpi: Call acpi_put_table() to fix memory leak
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpi_put_table() to fix memory leak The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpi_get_table() to get the ACPI information, but the acpi_get_table() should be coupled with acpi_put_table() to release the ACPI memory, add the acpi_put_table() properly to fix the memory leak. While we are at it, remove the redundant empty line at the end of the tpm_read_log_acpi().
Timeline
ID reserved
By Linux
Published
- 7 months later
· 7 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.21% · top 88% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 0bfb23746052168620c5b52f49d8a47c3bb022fa – < 8ddc48068ac85740d3d5f9f3b0b323e733a35b33
- affected 0bfb23746052168620c5b52f49d8a47c3bb022fa – < 638cd298dfebce46919cbd6cf1884701215f506d
- affected 0bfb23746052168620c5b52f49d8a47c3bb022fa – < 694a3d66f493afd77c704c6de91d9be4d6e004e4
- affected 0bfb23746052168620c5b52f49d8a47c3bb022fa – < bf31e3f8077af539feaf4e9bbf82e8eb51e7e5a8
- affected 0bfb23746052168620c5b52f49d8a47c3bb022fa – < 8740a12ca2e2959531ad253bac99ada338b33d80
- affected 4.18
- unaffected < 4.18
- unaffected 5.10.163 – ≤ 5.10.*
- unaffected 5.15.87 – ≤ 5.15.*
- unaffected 6.0.17 – ≤ 6.0.*
- unaffected 6.1.3 – ≤ 6.1.*
- unaffected 6.2 – ≤ *
References (5)
- https://git.kernel.org/stable/c/8ddc48068ac85740d3d5f9f3b0b323e733a35b33 (opens in a new tab)
- https://git.kernel.org/stable/c/638cd298dfebce46919cbd6cf1884701215f506d (opens in a new tab)
- https://git.kernel.org/stable/c/694a3d66f493afd77c704c6de91d9be4d6e004e4 (opens in a new tab)
- https://git.kernel.org/stable/c/bf31e3f8077af539feaf4e9bbf82e8eb51e7e5a8 (opens in a new tab)
- https://git.kernel.org/stable/c/8740a12ca2e2959531ad253bac99ada338b33d80 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50562)Record last updated .