{"id":"CVE-2025-71147","revision":"ec2e63620fdf4268a9a1bb2566aaccb1","records":[{"revision":"ec2e63620fdf4268a9a1bb2566aaccb1","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-71147","aliases":[],"title":"KEYS: trusted: Fix a memory leak in tpm2_load_cmd","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: trusted: Fix a memory leak in tpm2_load_cmd\n\n'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode'\nbut it is not freed in the failure paths. Address this by wrapping the blob\ninto with a cleanup helper.","state":0,"publishedAt":"2026-01-23T14:15:13.945+00:00","modifiedAt":"2026-10-19T18:15:16.099+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"security/keys/trusted-keys/trusted_tpm2.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"f2219745250f388edacabe6cca73654131c67d0a\",\n                            \"lessThan\": \"3fd7df4636d8fd5e3592371967a5941204368936\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2219745250f388edacabe6cca73654131c67d0a\",\n                            \"lessThan\": \"af0689cafb127a8d1af78cc8b72585c9b2a19ecd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2219745250f388edacabe6cca73654131c67d0a\",\n                            \"lessThan\": \"19166de9737218b77122c41a5730ac87025e089f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2219745250f388edacabe6cca73654131c67d0a\",\n                            \"lessThan\": \"9b015f2918b95bdde2ca9cefa10ef02b138aae1e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2219745250f388edacabe6cca73654131c67d0a\",\n                            \"lessThan\": \"9e7c63c69f57b1db1a8a1542359a6167ff8fcef1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2219745250f388edacabe6cca73654131c67d0a\",\n                            \"lessThan\": \"62cd5d480b9762ce70d720a81fa5b373052ae05f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"security/keys/trusted-keys/trusted_tpm2.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.198\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.64\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.3\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/3fd7df4636d8fd5e3592371967a5941204368936","https://git.kernel.org/stable/c/af0689cafb127a8d1af78cc8b72585c9b2a19ecd","https://git.kernel.org/stable/c/19166de9737218b77122c41a5730ac87025e089f","https://git.kernel.org/stable/c/9b015f2918b95bdde2ca9cefa10ef02b138aae1e","https://git.kernel.org/stable/c/9e7c63c69f57b1db1a8a1542359a6167ff8fcef1","https://git.kernel.org/stable/c/62cd5d480b9762ce70d720a81fa5b373052ae05f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71147","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-71147","identifiers":["CVE-2025-71147"]},"retained":false,"historicalAffected":[]}],"coverage":[]}