{"id":"CVE-2025-71147","title":"KEYS: trusted: Fix a memory leak in tpm2_load_cmd","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: trusted: Fix a memory leak in tpm2_load_cmd\n\n'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode'\nbut it is not freed in the failure paths. …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f2219745250f388edacabe6cca73654131c67d0a < 3fd7df4636d8fd5e3592371967a5941204368936","Linux >= f2219745250f388edacabe6cca73654131c67d0a < af0689cafb127a8d1af78cc8b72585c9b2a19ecd","Linux >= f2219745250f388edacabe6cca73654131c67d0a < 19166de9737218b77122c41a5730ac87025e089f","Linux >= f2219745250f388edacabe6cca73654131c67d0a < 9b015f2918b95bdde2ca9cefa10ef02b138aae1e","Linux >= f2219745250f388edacabe6cca73654131c67d0a < 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1","Linux >= f2219745250f388edacabe6cca73654131c67d0a < 62cd5d480b9762ce70d720a81fa5b373052ae05f","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-06-10T20:41:59.884894Z"},"published":"2026-01-23","updated":"2026-10-19","sourceUpdated":"2026-10-19T18:15:16.099Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71147","references":[{"url":"https://git.kernel.org/stable/c/3fd7df4636d8fd5e3592371967a5941204368936"},{"url":"https://git.kernel.org/stable/c/af0689cafb127a8d1af78cc8b72585c9b2a19ecd"},{"url":"https://git.kernel.org/stable/c/19166de9737218b77122c41a5730ac87025e089f"},{"url":"https://git.kernel.org/stable/c/9b015f2918b95bdde2ca9cefa10ef02b138aae1e"},{"url":"https://git.kernel.org/stable/c/9e7c63c69f57b1db1a8a1542359a6167ff8fcef1"},{"url":"https://git.kernel.org/stable/c/62cd5d480b9762ce70d720a81fa5b373052ae05f"}],"tags":["cve.org"],"epss":0.00137,"epssPercentile":0.02762,"ingestedAt":"2026-10-19T18:35:50.130Z","slug":"CVE-2025-71147","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: trusted: Fix a memory leak in tpm2_load_cmd\n\n'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode'\nbut it is not freed in the failure paths. Address this by wrapping the blob\ninto with a cleanup helper.\n\n## Affected\n\n- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 3fd7df4636d8fd5e3592371967a5941204368936`\n- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < af0689cafb127a8d1af78cc8b72585c9b2a19ecd`\n- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 19166de9737218b77122c41a5730ac87025e089f`\n- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 9b015f2918b95bdde2ca9cefa10ef02b138aae1e`\n- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1`\n- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 62cd5d480b9762ce70d720a81fa5b373052ae05f`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}