CVE-2022-50544: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
In the Linux kernel, the following vulnerability has been resolved:
usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo()
xhciallocstreaminfo() allocates stream context array for streaminfo ->streamctxarray with xhciallocstreamctx(). When some error occurs, streaminfo->streamctxarray is not released, which will lead to a memory leak.
We can fix it by releasing the streaminfo->streamctxarray with xhcifreestreamctx() on the error path to avoid the potential memory leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50544?
CVE-2022-50544 has been classified as a low severity vulnerability due to the potential for a memory leak.
How do I fix CVE-2022-50544?
To fix CVE-2022-50544, update to the latest version of the Linux kernel where the vulnerability has been patched.
What specific component is affected by CVE-2022-50544?
CVE-2022-50544 specifically affects the xHCI (USB 3.0) subsystem in the Linux kernel.
Can CVE-2022-50544 be exploited remotely?
CVE-2022-50544 is not a remotely exploitable vulnerability as it requires local access to the affected system.
What versions of the Linux kernel are impacted by CVE-2022-50544?
CVE-2022-50544 affects various versions of the Linux kernel prior to the patch that resolves the memory leak issue.