CVE-2022-49389

Feb. 26, 2025, 7:01 a.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stub_probe() usb_get_dev() is called in stub_device_alloc(). When stub_probe() fails after that, usb_put_dev() needs to be called to release the reference. Fix this by moving usb_put_dev() to sdev_free error path handling. Find this by code review.

Product(s) Impacted

Product Versions
Linux kernel
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/11c65408bd0ba1d9cd1307caa38169292de9cdfb
https://git.kernel.org/stable/c/247d3809e45a34d9e1a3a2bb7012e31ed8b46031
https://git.kernel.org/stable/c/2f0ae93ec33c8456cdfbf7876b80403a6318ebce
https://git.kernel.org/stable/c/51422046be504515eb5a591adf0f424b62f46804
https://git.kernel.org/stable/c/6bafee2f18af5e5ac125e42960bc65496d0e56a0
https://git.kernel.org/stable/c/8afb048800919d0ab10c57983940eba956339f21
https://git.kernel.org/stable/c/9ec4cbf1cc55d126759051acfe328d489c5d6e60
https://git.kernel.org/stable/c/bcbb795a9e78180d74c6ab21518da87e803dfdce
https://git.kernel.org/stable/c/f20d2d3b3364ce6525c050a8b6b4c54c8c19674d

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-02-26
CVE-2022-49389

Timeline

Published: Feb. 26, 2025, 7:01 a.m.
Last Modified: Feb. 26, 2025, 7:01 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.