CVE-2025-71147

MediumCVSS 5.5/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix a memory leak in tpm2_load_cmd

'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= f2219745250f388edacabe6cca73654131c67d0a, < 3fd7df4636d8fd5e3592371967a5941204368936; >= f2219745250f388edacabe6cca73654131c67d0a, < af0689cafb127a8d1af78cc8b72585c9b2a19ecd; >= f2219745250f388edacabe6cca73654131c67d0a, < 19166de9737218b77122c41a5730ac87025e089f; >= f2219745250f388edacabe6cca73654131c67d0a, < 9b015f2918b95bdde2ca9cefa10ef02b138aae1e; >= f2219745250f388edacabe6cca73654131c67d0a, < 9e7c63c69f57b1db1a8a1542359a6167ff8fcef1; >= f2219745250f388edacabe6cca73654131c67d0a, < 62cd5d480b9762ce70d720a81fa5b373052ae05f
LinuxLinux5.13

References

Timeline

Published
Jan 23, 2026
Last modified
Oct 19, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-711483.3In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submCVE-2025-71157.3A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by CVE-2025-711505.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookuCVE-2025-711515.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reCVE-2025-711527.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem descriptionCVE-2025-711535.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), CVE-2025-711545.5In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In asynCVE-2025-711557.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missCVE-2025-711567.8In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interCVE-2025-711577.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() CVE-2025-711585.5In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running,CVE-2025-711597.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node()
CVE-2025-71147: Medium severity, CVSS 5.5 | Vulnix