CVE-2025-71147: KEYS: trusted: Fix a memory leak in tpm2_load_cmd
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix a memory leak in tpm2loadcmd
'tpm2loadcmd' allocates a tempoary blob indirectly via 'tpm2keydecode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71147?
CVE-2025-71147 is categorized as having a medium severity due to its potential impact on memory management.
How do I fix CVE-2025-71147?
To remediate CVE-2025-71147, ensure that you apply the latest patches from the Linux kernel that address the memory leak in the 'tpm2_load_cmd' function.
What systems are affected by CVE-2025-71147?
CVE-2025-71147 affects the Linux kernel, particularly systems utilizing the trusted keys feature.
What are the consequences of exploiting CVE-2025-71147?
Exploiting CVE-2025-71147 could lead to increased memory usage and potential denial of service due to memory leaks.
Is CVE-2025-71147 a remote vulnerability?
CVE-2025-71147 is not classified as a remote vulnerability; it requires local access to exploit the memory leak.