In the Linux kernel, the following vulnerability has been resolved:
efi: ssdt: Don't free memory if ACPI table was loaded successfully
Amadeusz reports KASAN use-after-free errors introduced by commit
3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs from
variables"). The problem appears to be that the memory that holds the
new ACPI table is now freed unconditionally, instead of only when the
ACPI core reported a failure to load the table.
So let's fix this, by omitting the kfree() on success.
References
Configurations
Configuration 1 (hide)
|
History
20 Jan 2026, 15:33
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| CWE | CWE-416 | |
| First Time |
Linux
Linux linux Kernel |
|
| References | () https://git.kernel.org/stable/c/11497fd69cd2282538ec6eb4cda1d16fc061233d - Patch | |
| References | () https://git.kernel.org/stable/c/4b017e59f01097f19b938f6dc4dc2c4720701610 - Patch |
01 Oct 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-01 12:15
Updated : 2026-01-20 15:33
NVD link : CVE-2022-50433
Mitre link : CVE-2022-50433
CVE.ORG link : CVE-2022-50433
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free