Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's TPM driver, specifically within the TPM2 ACPI table handling. The issue arises in the 'check_acpi_tpm2()' function of the 'tpm_tis' driver, where the ACPI TPM2 table is retrieved but not properly released after use. This oversight can lead to unnecessary memory consumption. The vulnerability affects the Linux kernel stable tree.
The vulnerability causes a memory leak by failing to release ACPI table references, which can lead to increased memory usage over time.
The vulnerability can be reproduced by loading the 'tpm_tis' driver on a system with a TPM2 device that exposes an ACPI TPM2 table. The 'check_acpi_tpm2()' function will be called, retrieving the TPM2 table without releasing it, causing a memory leak.
The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version where this issue has been addressed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.