{
  "cveId": "CVE-2022-50433",
  "url": "https://patchblox.com/security/cve/CVE-2022-50433",
  "summary": "CVE-2022-50433 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50433, released October 1, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  efi: ssdt: Don\u0027t free memory if ACPI table was l...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  efi: ssdt: Don\u0027t free memory if ACPI table was loaded successfully  Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc (\u0022efi: avoid efivars layer when loading SSDTs from variables\u0022). The problem appears to be that the memory that holds the new ACPI table is now freed unconditionally, instead of only when the ACPI core reported a failure to load the table.  So let\u0027s fix this, by omitting the kfree() on success.",
  "published": "2025-10-01T12:15:35Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00157,
  "epssPercentile": 0.04869,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.5-1",
      "fix": "DEBIAN-CVE-2022-50433",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50433",
      "released": "2025-10-01T12:15:35Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.5-1",
      "fix": "DEBIAN-CVE-2022-50433",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50433",
      "released": "2025-10-01T12:15:35Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.5-1",
      "fix": "DEBIAN-CVE-2022-50433",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50433",
      "released": "2025-10-01T12:15:35Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}