CVE-2022-49713
published 2025-02-26CVE-2022-49713: In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and…
PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc2: Fix memory leak in dwc2_hcd_init
usb_create_hcd will alloc memory for hcd, and we should
call usb_put_hcd to free it when platform_get_resource()
fails to prevent memory leak.
goto error2 label instead error1 to fix this.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 2754fa3b73df7d0ae042f3ed6cfd9df9042f6262 < a44a8a762f7fe9ad3c065813d058e835a6180cb2 | a44a8a762f7fe9ad3c065813d058e835a6180cb2 |
| linux | linux | >= 4.14.250 < 4.14.285 | 4.14.285 |
| linux | linux | >= 4.19.210 < 4.19.249 | 4.19.249 |
| linux | linux | >= 4b7f4a0eb92bf37bea4cd838c7f83ea42823ca8b < 981ee40649e5fd9550f82db1fbb3bfab037da346 | 981ee40649e5fd9550f82db1fbb3bfab037da346 |
| linux | linux | >= 5.10.72 < 5.10.124 | 5.10.124 |
| linux | linux | >= 5.14.11 < 5.15 | 5.15 |
| linux | linux | >= 5.4.152 < 5.4.200 | 5.4.200 |
| linux | linux | >= 856e6e8e0f9300befa87dde09edb578555c99a82 < 701d8ec01e0f229d4db6f43d3d64ee479120cbeb | 701d8ec01e0f229d4db6f43d3d64ee479120cbeb |
| linux | linux | >= 856e6e8e0f9300befa87dde09edb578555c99a82 < 52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfd | 52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfd |
| linux | linux | >= 856e6e8e0f9300befa87dde09edb578555c99a82 < 3755278f078460b021cd0384562977bf2039a57a | 3755278f078460b021cd0384562977bf2039a57a |
| linux | linux | >= 8b9c1c33e51d0959f2aec573dfbac0ffd3f5c0b7 < 6506aff2dc2f7059aa3d45ee2e8639b25e87090f | 6506aff2dc2f7059aa3d45ee2e8639b25e87090f |
| linux | linux | >= a7182993dd8e09f96839ddc3ac54f9b37370d282 < 84e6d0af87e27bbc0db94f2e7323b34abe17b6e5 | 84e6d0af87e27bbc0db94f2e7323b34abe17b6e5 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.127-1 | 5.10.127-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.14.250 < 4.14.285 | 4.14.285 |
| linux | linux_kernel | >= 4.19.210 < 4.19.249 | 4.19.249 |
| linux | linux_kernel | >= 5.10.72 < 5.10.124 | 5.10.124 |
| linux | linux_kernel | >= 5.14.11 < 5.15.49 | 5.15.49 |
| linux | linux_kernel | >= 5.16 < 5.18.6 | 5.18.6 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f3rv-hpw2-w8hv: In the Linux kernel, the following vulnerability has been resolved:
usb: dwc2: Fix memory leak in dwc2_hcd_init
usb_create_hcd will alloc memory for
ghsa_unreviewed·2025-03-12
CVE-2022-49713 [MEDIUM] CWE-401 GHSA-f3rv-hpw2-w8hv: In the Linux kernel, the following vulnerability has been resolved:
usb: dwc2: Fix memory leak in dwc2_hcd_init
usb_create_hcd will alloc memory for
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc2: Fix memory leak in dwc2_hcd_init
usb_create_hcd will alloc memory for hcd, and we should
call usb_put_hcd to free it when platform_get_resource()
fails to prevent memory leak.
goto error2 label instead error1 to fix this.
OSV
CVE-2022-49713: In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for h
osv·2025-02-26·CVSS 5.5
CVE-2022-49713 [MEDIUM] CVE-2022-49713: In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for h
In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when platform_get_resource() fails to prevent memory leak. goto error2 label instead error1 to fix this.
Red Hat
kernel: usb: dwc2: Fix memory leak in dwc2_hcd_init
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49713 [MEDIUM] CWE-401 kernel: usb: dwc2: Fix memory leak in dwc2_hcd_init
kernel: usb: dwc2: Fix memory leak in dwc2_hcd_init
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc2: Fix memory leak in dwc2_hcd_init
usb_create_hcd will alloc memory for hcd, and we should
call usb_put_hcd to free it when platform_get_resource()
fails to prevent memory leak.
goto error2 label instead error1 to fix this.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: ke
Debian
CVE-2022-49713: linux - In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-49713 [MEDIUM] CVE-2022-49713: linux - In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: ...
In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when platform_get_resource() fails to prevent memory leak. goto error2 label instead error1 to fix this.
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.127-1)
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/3755278f078460b021cd0384562977bf2039a57ahttps://git.kernel.org/stable/c/52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfdhttps://git.kernel.org/stable/c/6506aff2dc2f7059aa3d45ee2e8639b25e87090fhttps://git.kernel.org/stable/c/701d8ec01e0f229d4db6f43d3d64ee479120cbebhttps://git.kernel.org/stable/c/84e6d0af87e27bbc0db94f2e7323b34abe17b6e5https://git.kernel.org/stable/c/981ee40649e5fd9550f82db1fbb3bfab037da346https://git.kernel.org/stable/c/a44a8a762f7fe9ad3c065813d058e835a6180cb2
2025-02-26
Published