CVE-2022-50389
published 2025-09-18CVE-2022-50389: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
In crb_acpi_add(), we get the TPM2 table to retrieve information
like start method, and then assign them to the priv data, so the
TPM2 table is not used after the init, should be freed, call
acpi_put_table() to fix the memory leak.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 08fd965521d0e172d540cf945517810895fcb199 | 08fd965521d0e172d540cf945517810895fcb199 |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 1af2232b13837ce0f3a082b9f43735b09aafc367 | 1af2232b13837ce0f3a082b9f43735b09aafc367 |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 927860dfa161ae8392a264197257dbdc52b26b0f | 927860dfa161ae8392a264197257dbdc52b26b0f |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 0bd9b4be721c776f77adcaf34105dfca3007ddb9 | 0bd9b4be721c776f77adcaf34105dfca3007ddb9 |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 986cd9a9b95423e35a2cbb8e9105aec0e0d7f337 | 986cd9a9b95423e35a2cbb8e9105aec0e0d7f337 |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 2fcd3dc8b97a14f1672729c86b7041a1a89b052a | 2fcd3dc8b97a14f1672729c86b7041a1a89b052a |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < b0785edaf649e5f04dc7f75533e810f4c00e4106 | b0785edaf649e5f04dc7f75533e810f4c00e4106 |
| linux | linux | >= 30fc8d138e9123f374a3c3867e7c7c5cd4004941 < 37e90c374dd11cf4919c51e847c6d6ced0abc555 | 37e90c374dd11cf4919c51e847c6d6ced0abc555 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 4.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11 < 5.15.87 | 5.15.87 |
| linux | linux_kernel | >= 5.16 < 6.0.17 | 6.0.17 |
| linux | linux_kernel | >= 5.5 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.3 | 6.1.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50389: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add()
osv·2025-09-18·CVSS 5.5
CVE-2022-50389 [MEDIUM] CVE-2022-50389: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add()
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.
GHSA
GHSA-gmpx-hjjv-xj6f: In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
In crb_acpi_add
ghsa_unreviewed·2025-09-18
CVE-2022-50389 [MEDIUM] CWE-401 GHSA-gmpx-hjjv-xj6f: In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
In crb_acpi_add
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
In crb_acpi_add(), we get the TPM2 table to retrieve information
like start method, and then assign them to the priv data, so the
TPM2 table is not used after the init, should be freed, call
acpi_put_table() to fix the memory leak.
Red Hat
kernel: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
vendor_redhat·2025-09-18·CVSS 5.5
CVE-2022-50389 [MEDIUM] CWE-772 kernel: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
kernel: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
In crb_acpi_add(), we get the TPM2 table to retrieve information
like start method, and then assign them to the priv data, so the
TPM2 table is not used after the init, should be freed, call
acpi_put_table() to fix the memory leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-rt (Red Hat Enterprise L
Debian
CVE-2022-50389: linux - In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_cr...
vendor_debian·2022·CVSS 5.5
CVE-2022-50389 [MEDIUM] CVE-2022-50389: linux - In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_cr...
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/08fd965521d0e172d540cf945517810895fcb199https://git.kernel.org/stable/c/0bd9b4be721c776f77adcaf34105dfca3007ddb9https://git.kernel.org/stable/c/1af2232b13837ce0f3a082b9f43735b09aafc367https://git.kernel.org/stable/c/2fcd3dc8b97a14f1672729c86b7041a1a89b052ahttps://git.kernel.org/stable/c/37e90c374dd11cf4919c51e847c6d6ced0abc555https://git.kernel.org/stable/c/927860dfa161ae8392a264197257dbdc52b26b0fhttps://git.kernel.org/stable/c/986cd9a9b95423e35a2cbb8e9105aec0e0d7f337https://git.kernel.org/stable/c/b0785edaf649e5f04dc7f75533e810f4c00e4106
2025-09-18
Published