---
id: CVE-2025-71147
title: 'KEYS: trusted: Fix a memory leak in tpm2_load_cmd'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  KEYS: trusted: Fix a memory leak in tpm2_load_cmd

  'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode'
  but it is not freed in the failure paths. …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f2219745250f388edacabe6cca73654131c67d0a <
    3fd7df4636d8fd5e3592371967a5941204368936
  - >-
    Linux >= f2219745250f388edacabe6cca73654131c67d0a <
    af0689cafb127a8d1af78cc8b72585c9b2a19ecd
  - >-
    Linux >= f2219745250f388edacabe6cca73654131c67d0a <
    19166de9737218b77122c41a5730ac87025e089f
  - >-
    Linux >= f2219745250f388edacabe6cca73654131c67d0a <
    9b015f2918b95bdde2ca9cefa10ef02b138aae1e
  - >-
    Linux >= f2219745250f388edacabe6cca73654131c67d0a <
    9e7c63c69f57b1db1a8a1542359a6167ff8fcef1
  - >-
    Linux >= f2219745250f388edacabe6cca73654131c67d0a <
    62cd5d480b9762ce70d720a81fa5b373052ae05f
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-06-10T20:41:59.884894Z'
published: '2026-01-23'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T18:15:16.099Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71147'
references:
  - url: 'https://git.kernel.org/stable/c/3fd7df4636d8fd5e3592371967a5941204368936'
  - url: 'https://git.kernel.org/stable/c/af0689cafb127a8d1af78cc8b72585c9b2a19ecd'
  - url: 'https://git.kernel.org/stable/c/19166de9737218b77122c41a5730ac87025e089f'
  - url: 'https://git.kernel.org/stable/c/9b015f2918b95bdde2ca9cefa10ef02b138aae1e'
  - url: 'https://git.kernel.org/stable/c/9e7c63c69f57b1db1a8a1542359a6167ff8fcef1'
  - url: 'https://git.kernel.org/stable/c/62cd5d480b9762ce70d720a81fa5b373052ae05f'
tags:
  - cve.org
epss: 0.00137
epssPercentile: 0.02762
ingestedAt: '2026-10-19T18:35:50.130Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix a memory leak in tpm2_load_cmd

'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode'
but it is not freed in the failure paths. Address this by wrapping the blob
into with a cleanup helper.

## Affected

- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 3fd7df4636d8fd5e3592371967a5941204368936`
- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < af0689cafb127a8d1af78cc8b72585c9b2a19ecd`
- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 19166de9737218b77122c41a5730ac87025e089f`
- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 9b015f2918b95bdde2ca9cefa10ef02b138aae1e`
- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1`
- `Linux >= f2219745250f388edacabe6cca73654131c67d0a < 62cd5d480b9762ce70d720a81fa5b373052ae05f`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.