CVE-2022-50484: ALSA: usb-audio: Fix potential memory leaks
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential memory leaks
When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at the middle of the sync EP URB allocation loop, the partially allocated URBs might be left without released, because ep->nurbs is still zero at that point.
Fix it by setting ep->nurbs at first, so that the error handler loops over the full URB list.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50484?
CVE-2022-50484 has a severity rating of medium due to potential memory leaks in the Linux kernel's ALSA usb-audio driver.
How do I fix CVE-2022-50484?
To fix CVE-2022-50484, update your Linux kernel to the latest stable version where this vulnerability has been patched.
What are the potential impacts of CVE-2022-50484?
The impacts of CVE-2022-50484 include potential memory leaks that could lead to resource exhaustion and degraded system performance.
Which versions of the Linux kernel are affected by CVE-2022-50484?
CVE-2022-50484 affects certain versions of the Linux kernel that utilize the ALSA usb-audio driver prior to the patch.
Who is responsible for addressing CVE-2022-50484?
The maintainers of the Linux kernel are responsible for addressing CVE-2022-50484 through updates and patches.