← CVE Intelligence

CVE-2025-71147

KEYS: trusted: Fix a memory leak in tpm2_load_cmd PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected f2219745250f388edacabe6cca73654131c67d0a before 3fd7df4636d8fd5e3592371967a5941204368936; affected f2219745250f388edacabe6cca73654131c67d0a before af0689cafb127a8d1af78cc8b72585c9b2a19ecd; affected f2219745250f388edacabe6cca73654131c67d0a before 19166de9737218b77122c41a5730ac87025e089f; affected f2219745250f388edacabe6cca73654131c67d0a before 9b015f2918b95bdde2ca9cefa10ef02b138aae1e; affected f2219745250f388edacabe6cca73654131c67d0a before 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1; affected f2219745250f388edacabe6cca73654131c67d0a before 62cd5d480b9762ce70d720a81fa5b373052ae05f
Linux / Linuxaffected 5.13; unaffected 0 before 5.13; unaffected 5.15.198 through 5.15.*; unaffected 6.1.160 through 6.1.*; unaffected 6.6.120 through 6.6.*; unaffected 6.12.64 through 6.12.*; unaffected 6.18.3 through 6.18.*; unaffected 6.19 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.