Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-71147

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d843465aa2e0740a260e653b6f8a0ad41de27f1e9952abb504fca7c92bf3733e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3fd7df4636d8fd5e3592371967a5941204368936","status":"affected","version":"f2219745250f388edacabe6cca73654131c67d0a","versionType":"git"},{"lessThan":"af0689cafb127a8d1af78cc8b72585c9b2a19ecd","status":"affected","version":"f2219745250f388edacabe6cca73654131c67d0a","versionType":"git"},{"lessThan":"19166de9737218b77122c41a5730ac87025e089f","status":"affected","version":"f221…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/keys/trusted-keys/trusted_tpm2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3fd7df4636d8fd5e3592371967a5941204368936","status":"affected","version":"f2219745250f388edacabe6cca73654131c67d0a","versionType":"git"},{"lessThan":"af0689cafb127a8d1af78cc8b72585c9b2a19ecd","status":"affected","version":"f2219745250f388edacabe6cca73654131c67d0a","versionType":"git"},{"lessThan":"19166de9737218b77122c41a5730ac87025e089f","status":"affected","version":"f221…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/19166de9737218b77122c41a5730ac87025e089f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/3fd7df4636d8fd5e3592371967a5941204368936"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/62cd5d480b9762ce70d720a81fa5b373052ae05f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/9b015f2918b95bdde2ca9cefa10ef02b138aae1e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9e7c63c69f57b1db1a8a1542359a6167ff8fcef1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/af0689cafb127a8d1af78cc8b72585c9b2a19ecd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:29e4b56d7a3d24acee29883187afe96aae22a6e5843369fb56eac73cb4e07a66 · sha256:4c3b2ed74b26e72a… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer