CVE-2022-50433
published 2025-10-01CVE-2022-50433: In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.14%
4.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
efi: ssdt: Don't free memory if ACPI table was loaded successfully
Amadeusz reports KASAN use-after-free errors introduced by commit
3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from
variables"). The problem appears to be that the memory that holds the
new ACPI table is now freed unconditionally, instead of only when the
ACPI core reported a failure to load the table.
So let's fix this, by omitting the kfree() on success.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.5-1 (bookworm) | linux 6.0.5-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3881ee0b1edce0ece72d24b7c74f46b73bd6dcba < 11497fd69cd2282538ec6eb4cda1d16fc061233d | 11497fd69cd2282538ec6eb4cda1d16fc061233d |
| linux | linux | >= 3881ee0b1edce0ece72d24b7c74f46b73bd6dcba < 4b017e59f01097f19b938f6dc4dc2c4720701610 | 4b017e59f01097f19b938f6dc4dc2c4720701610 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.0.5-1 | 6.0.5-1 |
| linux | linux_kernel | >= 0 < 6.0.5-1 | 6.0.5-1 |
| linux | linux_kernel | >= 0 < 6.0.5-1 | 6.0.5-1 |
| linux | linux_kernel | >= 6.0 < 6.0.4 | 6.0.4 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: efi: ssdt: Don't free memory if ACPI table was loaded successfully
vendor_redhat·2025-10-01·CVSS 7.8
CVE-2022-50433 [HIGH] CWE-825 kernel: efi: ssdt: Don't free memory if ACPI table was loaded successfully
kernel: efi: ssdt: Don't free memory if ACPI table was loaded successfully
In the Linux kernel, the following vulnerability has been resolved:
efi: ssdt: Don't free memory if ACPI table was loaded successfully
Amadeusz reports KASAN use-after-free errors introduced by commit
3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from
variables"). The problem appears to be that the memory that holds the
new ACPI table is now freed unconditionally, instead of only when the
ACPI core reported a failure to load the table.
So let's fix this, by omitting the kfree() on success.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Ent
Debian
CVE-2022-50433: linux - In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: ...
vendor_debian·2022·CVSS 7.8
CVE-2022-50433 [HIGH] CVE-2022-50433: linux - In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: ...
In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from variables"). The problem appears to be that the memory that holds the new ACPI table is now freed unconditionally, instead of only when the ACPI core reported a failure to load the table. So let's fix this, by omitting the kfree() on success.
Scope: local
bookworm: resolved (fixed in 6.0.5-1)
bullseye: resolved
forky: resolved (fixed in 6.0.5-1)
sid: resolved (fixed in 6.0.5-1)
trixie: resolved (fixed in 6.0.5-1)
GHSA
GHSA-g2f3-v5g7-7j6h: In the Linux kernel, the following vulnerability has been resolved:
efi: ssdt: Don't free memory if ACPI table was loaded successfully
Amadeusz repo
ghsa_unreviewed·2025-10-01
CVE-2022-50433 [HIGH] CWE-416 GHSA-g2f3-v5g7-7j6h: In the Linux kernel, the following vulnerability has been resolved:
efi: ssdt: Don't free memory if ACPI table was loaded successfully
Amadeusz repo
In the Linux kernel, the following vulnerability has been resolved:
efi: ssdt: Don't free memory if ACPI table was loaded successfully
Amadeusz reports KASAN use-after-free errors introduced by commit
3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from
variables"). The problem appears to be that the memory that holds the
new ACPI table is now freed unconditionally, instead of only when the
ACPI core reported a failure to load the table.
So let's fix this, by omitting the kfree() on success.
OSV
CVE-2022-50433: In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz report
osv·2025-10-01·CVSS 7.8
CVE-2022-50433 [HIGH] CVE-2022-50433: In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz report
In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from variables"). The problem appears to be that the memory that holds the new ACPI table is now freed unconditionally, instead of only when the ACPI core reported a failure to load the table. So let's fix this, by omitting the kfree() on success.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-01
Published