CVE-2022-49713

Katalog CVE

CVSS 5.5 · Medium EPSS 0,29%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when platform_get_resource() fails to prevent memory leak. goto error2 label instead error1 to fix this.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3755278f078460b021cd0384562977bf2039a57a patch
• https://git.kernel.org/stable/c/52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfd patch
• https://git.kernel.org/stable/c/6506aff2dc2f7059aa3d45ee2e8639b25e87090f patch
• https://git.kernel.org/stable/c/701d8ec01e0f229d4db6f43d3d64ee479120cbeb patch
• https://git.kernel.org/stable/c/84e6d0af87e27bbc0db94f2e7323b34abe17b6e5 patch
• https://git.kernel.org/stable/c/981ee40649e5fd9550f82db1fbb3bfab037da346 patch
• https://git.kernel.org/stable/c/a44a8a762f7fe9ad3c065813d058e835a6180cb2 patch