Riskcovery

CVE-2022-50433

efi: ssdt: Don't free memory if ACPI table was loaded successfully

State
Published
Severity
Not scored
Published
Oct 1, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

efi: ssdt: Don't free memory if ACPI table was loaded successfully

Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from variables"). The problem appears to be that the memory that holds the new ACPI table is now freed unconditionally, instead of only when the ACPI core reported a failure to load the table.

So let's fix this, by omitting the kfree() on success.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3881ee0b1edce0ece72d24b7c74f46b73bd6dcba to before 11497fd69cd2282538ec6eb4cda1d16fc061233dAffected
  • 3881ee0b1edce0ece72d24b7c74f46b73bd6dcba to before 4b017e59f01097f19b938f6dc4dc2c4720701610Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.0.4 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.