MediumFix available
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.303, 4.19.270, 5.10.163, 5.15.87, 5.4.229, 6.0.17, 6.1.3
- CVEs
- CVE-2022-50389
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 11:39 UTC · Revision 1
Source evidence
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
core-osv · Original sourcePublished 18 Sept 2025, 13:33 UTC
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.
osv:CVE-2022-50389
Kernel
Fixed versions: 4.14.303, 4.19.270, 5.4.229, 5.10.163, 5.15.87, 6.0.17, 6.1.3
Complete source record
{
"id": "6174801fc6787db0f3420642b9ed39e9393f53f03aff6ba65858ed4004d8858b",
"url": "https://osv.dev/vulnerability/CVE-2022-50389",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak",
"summary": "In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak.",
"evidence": "osv:CVE-2022-50389",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.14.303",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.270",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.229",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.163",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.87",
"evidence": "/affected/1/ranges"
},
{
"value": "6.0.17",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "CVE-2022-50389",
"aliases": [
"CVE-2022-50389"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "30fc8d138e9123f374a3c3867e7c7c5cd4004941"
},
{
"fixed": "08fd965521d0e172d540cf945517810895fcb199"
},
{
"fixed": "1af2232b13837ce0f3a082b9f43735b09aafc367"
},
{
"fixed": "927860dfa161ae8392a264197257dbdc52b26b0f"
},
{
"fixed": "0bd9b4be721c776f77adcaf34105dfca3007ddb9"
},
{
"fixed": "986cd9a9b95423e35a2cbb8e9105aec0e0d7f337"
},
{
"fixed": "2fcd3dc8b97a14f1672729c86b7041a1a89b052a"
},
{
"fixed": "b0785edaf649e5f04dc7f75533e810f4c00e4106"
},
{
"fixed": "37e90c374dd11cf4919c51e847c6d6ced0abc555"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50389.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.14.303"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.270"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.229"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.163"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.87"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.0.17"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.1.0"
},
{
"fixed": "6.1.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50389.json"
}
}
],
"modified": "2026-10-28T02:30:50.634912615Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/08fd965521d0e172d540cf945517810895fcb199",
"https://git.kernel.org/stable/c/0bd9b4be721c776f77adcaf34105dfca3007ddb9",
"https://git.kernel.org/stable/c/1af2232b13837ce0f3a082b9f43735b09aafc367",
"https://git.kernel.org/stable/c/2fcd3dc8b97a14f1672729c86b7041a1a89b052a",
"https://git.kernel.org/stable/c/37e90c374dd11cf4919c51e847c6d6ced0abc555",
"https://git.kernel.org/stable/c/927860dfa161ae8392a264197257dbdc52b26b0f",
"https://git.kernel.org/stable/c/986cd9a9b95423e35a2cbb8e9105aec0e0d7f337",
"https://git.kernel.org/stable/c/b0785edaf649e5f04dc7f75533e810f4c00e4106",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50389.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50389",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50389.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50389",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 519157,
"published_at": "2025-09-18T13:33:09.322+00:00"
}