CVE-2022-49657
published 2025-02-26CVE-2022-49657: In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buffers need…
PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnet_write_cmd_async() mixed up which buffers
need to be freed in which error case.
v2: add Fixes tag
v3: fix uninitialized buf pointer
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < 3eed421ca5c809da93456f69203d164d5220be3d | 3eed421ca5c809da93456f69203d164d5220be3d |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < 5269209f54dd8dfd15f9383f3a3a1fe8370764f8 | 5269209f54dd8dfd15f9383f3a3a1fe8370764f8 |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < d5165e657987ff4ba0ace896d4376a3718a9fbc3 | d5165e657987ff4ba0ace896d4376a3718a9fbc3 |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < 04894ab34faf40ab72a8a5ab5b404bb0606bbbff | 04894ab34faf40ab72a8a5ab5b404bb0606bbbff |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < 0085da9df3dced730027923a6b48f58e9016af91 | 0085da9df3dced730027923a6b48f58e9016af91 |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < db89582ff330556188da856e01382ccbf3a5e706 | db89582ff330556188da856e01382ccbf3a5e706 |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < e7b4f69946a38209b4a4f660bf0e4cbed94f9b4b | e7b4f69946a38209b4a4f660bf0e4cbed94f9b4b |
| linux | linux | >= 877bd862f32b815d54ab5fc10a4fd903d7bf3012 < b55a21b764c1e182014630fa5486d717484ac58f | b55a21b764c1e182014630fa5486d717484ac58f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.136-1 | 5.10.136-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 3.8 < 4.9.323 | 4.9.323 |
| linux | linux_kernel | >= 4.10 < 4.14.288 | 4.14.288 |
| linux | linux_kernel | >= 4.15 < 4.19.252 | 4.19.252 |
| linux | linux_kernel | >= 4.20 < 5.4.205 | 5.4.205 |
| linux | linux_kernel | >= 5.11 < 5.15.54 | 5.15.54 |
| linux | linux_kernel | >= 5.16 < 5.18.11 | 5.18.11 |
| linux | linux_kernel | >= 5.5 < 5.10.130 | 5.10.130 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-98w9-rphx-h82j: In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnet_write_cmd_async() mixed up which bu
ghsa_unreviewed·2025-03-12
CVE-2022-49657 [MEDIUM] CWE-401 GHSA-98w9-rphx-h82j: In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnet_write_cmd_async() mixed up which bu
In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnet_write_cmd_async() mixed up which buffers
need to be freed in which error case.
v2: add Fixes tag
v3: fix uninitialized buf pointer
OSV
CVE-2022-49657: In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buff
osv·2025-02-26·CVSS 5.5
CVE-2022-49657 [MEDIUM] CVE-2022-49657: In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buff
In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer
Red Hat
kernel: usbnet: fix memory leak in error case
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49657 [MEDIUM] CWE-401 kernel: usbnet: fix memory leak in error case
kernel: usbnet: fix memory leak in error case
In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnet_write_cmd_async() mixed up which buffers
need to be freed in which error case.
v2: add Fixes tag
v3: fix uninitialized buf pointer
Statement: The bug could happen on error path for some specific cases of network links over USB being used. It leads to memory leak only, so the security impact is limited.
Mitigation: To mitigate this issue, prevent module usbnet from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support
Debian
CVE-2022-49657: linux - In the Linux kernel, the following vulnerability has been resolved: usbnet: fix...
vendor_debian·2022·CVSS 5.5
CVE-2022-49657 [MEDIUM] CVE-2022-49657: linux - In the Linux kernel, the following vulnerability has been resolved: usbnet: fix...
In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.136-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0085da9df3dced730027923a6b48f58e9016af91https://git.kernel.org/stable/c/04894ab34faf40ab72a8a5ab5b404bb0606bbbffhttps://git.kernel.org/stable/c/3eed421ca5c809da93456f69203d164d5220be3dhttps://git.kernel.org/stable/c/5269209f54dd8dfd15f9383f3a3a1fe8370764f8https://git.kernel.org/stable/c/b55a21b764c1e182014630fa5486d717484ac58fhttps://git.kernel.org/stable/c/d5165e657987ff4ba0ace896d4376a3718a9fbc3https://git.kernel.org/stable/c/db89582ff330556188da856e01382ccbf3a5e706https://git.kernel.org/stable/c/e7b4f69946a38209b4a4f660bf0e4cbed94f9b4b
2025-02-26
Published