CVE-2022-49713

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc2: Fix memory leak in dwc2_hcd_init

usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when platform_get_resource() fails to prevent memory leak. goto error2 label instead error1 to fix this.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

Vendor	Product	Versions
Linux	Linux	>= 4b7f4a0eb92bf37bea4cd838c7f83ea42823ca8b, < 981ee40649e5fd9550f82db1fbb3bfab037da346; >= a7182993dd8e09f96839ddc3ac54f9b37370d282, < 84e6d0af87e27bbc0db94f2e7323b34abe17b6e5; >= 8b9c1c33e51d0959f2aec573dfbac0ffd3f5c0b7, < 6506aff2dc2f7059aa3d45ee2e8639b25e87090f; >= 2754fa3b73df7d0ae042f3ed6cfd9df9042f6262, < a44a8a762f7fe9ad3c065813d058e835a6180cb2; >= 856e6e8e0f9300befa87dde09edb578555c99a82, < 701d8ec01e0f229d4db6f43d3d64ee479120cbeb; >= 856e6e8e0f9300befa87dde09edb578555c99a82, < 52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfd; >= 856e6e8e0f9300befa87dde09edb578555c99a82, < 3755278f078460b021cd0384562977bf2039a57a; 337f00a0bc62d7cb7d10ec0b872c79009a1641df; >= 4.14.250, < 4.14.285; >= 4.19.210, < 4.19.249; >= 5.4.152, < 5.4.200; >= 5.10.72, < 5.10.124; >= 5.14.11, < 5.15
Linux	Linux	5.15

References

Timeline

Published: Feb 26, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-497145.5In the Linux kernel, the following vulnerability has been resolved: irqchip/realtek-rtl: Fix refcount leak in map_interrupts of_find_node_CVE-2022-497155.5In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions of_fi CVE-2022-497165.5In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions of_g CVE-2022-497175.5In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix refcount leak in build_fiq_affinity of_find_nod CVE-2022-497185.5In the Linux kernel, the following vulnerability has been resolved: irqchip/apple-aic: Fix refcount leak in aic_of_ic_init of_get_child_by CVE-2022-497195.5In the Linux kernel, the following vulnerability has been resolved: irqchip/gic/realview: Fix refcount leak in realview_gic_of_init of_fin CVE-2022-49727.5The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes CVE-2022-497207.8In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blk_mq_alloc_request_hctx() T CVE-2022-497215.5In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handle PLTs. Sometimes it is necessary to CVE-2022-497227.8In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, whe CVE-2022-497235.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/reset: Fix error_state_read ptr + offset use Fix our pointer CVE-2022-497247.8In the Linux kernel, the following vulnerability has been resolved: tty: goldfish: Fix free_irq() on remove Pass the correct dev_id to fre