CVE-2022-50544
Description
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs, stream_info->stream_ctx_array is not released, which will lead to a memory leak. We can fix it by releasing the stream_info->stream_ctx_array with xhci_free_stream_ctx() on the error path to avoid the potential memory leak.
How to fix
- linux linux_kernel4.9.331, 4.14.296, 4.19.262, 5.4.220, 5.10.150, 5.15.75, 5.19.17, 6.0.3 or later
- git.kernel.org/stable/c/782c873f8e7686f5b3c47e8b099f7e08c3dd1fdc
- git.kernel.org/stable/c/7e271f42a5cc3768cd2622b929ba66859ae21f97
- git.kernel.org/stable/c/7fc6bab3413e6a42bb1264ff7c9149808c93a4c7
- git.kernel.org/stable/c/91271a3e772e180bbb8afb114c72fd294a02f93d
- git.kernel.org/stable/c/9fa81cbd2dd300aa8fe9bac70e068b9a11cbb144
- git.kernel.org/stable/c/a40ad475236022f3432880e3091c380e46e71a71
- git.kernel.org/stable/c/ddab9fe76296840aad686c66888a9c1dfdbff5ff
- git.kernel.org/stable/c/e702de2f5c893bf2cdb0152191f99a6ad1411823
- git.kernel.org/stable/c/fcd594da0b5955119d9707e4e0a8d0fb1c969101
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 2.6.35 ≤ v < 4.9.331, 4.10 ≤ v < 4.14.296, 4.15 ≤ v < 4.19.262, 4.20 ≤ v < 5.4.220, 5.5 ≤ v < 5.10.150, 5.11 ≤ v < 5.15.75, 5.16 ≤ v < 5.19.17, 6.0 ≤ v < 6.0.3 | 4.9.331, 4.14.296, 4.19.262, 5.4.220, 5.10.150, 5.15.75, 5.19.17, 6.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.