Strix
26.1K

CVE-2022-50824

UnknownEPSS 0.22%

Last modified

CVE-2022-50824 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak In check_acpi_tpm2(), we get the TPM2 table just to make sure the table is there, not used after the init, so the acpi_put_table() should be added to release the ACPI memory.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak In check_acpi_tpm2(), we get the TPM2 table just to make sure the table is there, not used after the init, so the acpi_put_table() should be added to release the ACPI memory.

Metrics

EPSS Probability
0.22%

12.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 4cb586a188d468e05649575f0689dd2bf8c122e6, < 8bc6c10d3f389693410adb14b4e9deec01ff6334; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < de667a2704ae799f697fd45cf4317623d8c79fb7; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < e027f3b9fabd2b410a4e6a7651e7a45b87019f23; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < 3b6c822238da9ee8984803355601bcc603d49cb5; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < 43135fb098126ef2cd6ed584900fd7bfa25f95ce; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < e0d1cf8ef84bb14a673215699fb8acc187aa2c4a; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < e60fa800a32a693d672b1a091424d780278c4587; >= 4cb586a188d468e05649575f0689dd2bf8c122e6, < db9622f762104459ff87ecdf885cc42c18053fd9
LinuxLinux4.13

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2022-50824?
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak In check_acpi_tpm2(), we get the TPM2 table just to make sure the table is there, not used after the init, so the acpi_put_table() should be added to release the ACPI memory.
How severe is CVE-2022-50824?
Severity scoring for CVE-2022-50824 is pending analysis. The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2022-50824?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2022

View all 2022CVEs →

Are you affected by CVE-2022-50824?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST