CVE-2022-49982
published 2025-06-18CVE-2022-49982: In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_create…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: pvrusb2: fix memory leak in pvr_probe
The error handling code in pvr2_hdw_create forgets to unregister the
v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create,
it calls pvr2_context_destroy to destroy context, but mp->hdw is NULL,
which leads to that pvr2_hdw_destroy directly returns.
Fix this by adding v4l2_device_unregister to decrease the refcount of
usb interface.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < 2fe46195d2f0d5d09ea65433aefe47a4d0d0ff4d | 2fe46195d2f0d5d09ea65433aefe47a4d0d0ff4d |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < ba7dd8a9686a61a34b3a7b922ce721378d4740d0 | ba7dd8a9686a61a34b3a7b922ce721378d4740d0 |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < 491762b3250fb06a0c97b5198656ea48359eaeed | 491762b3250fb06a0c97b5198656ea48359eaeed |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < 466b67c0543b2ae67814d053f6e29b39be6b33bb | 466b67c0543b2ae67814d053f6e29b39be6b33bb |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < bacb37bdc2a21c8f7fdc83dcc0dea2f4ca1341fb | bacb37bdc2a21c8f7fdc83dcc0dea2f4ca1341fb |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < f2f6e67522916f53ad8ccd4dbe68dcf76e9776e5 | f2f6e67522916f53ad8ccd4dbe68dcf76e9776e5 |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < c02d2a91a85c4c4d05826cd1ea74a9b8d42e4280 | c02d2a91a85c4c4d05826cd1ea74a9b8d42e4280 |
| linux | linux | >= b72b7bf5cbb2ae77b3bf748456655fc284baf04c < 945a9a8e448b65bec055d37eba58f711b39f66f0 | 945a9a8e448b65bec055d37eba58f711b39f66f0 |
| linux | linux_kernel | < 4.9.327 | 4.9.327 |
| linux | linux_kernel | >= 0 < 5.10.148-1 | 5.10.148-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.10 < 4.14.292 | 4.14.292 |
| linux | linux_kernel | >= 4.15 < 4.19.257 | 4.19.257 |
| linux | linux_kernel | >= 4.20 < 5.4.212 | 5.4.212 |
| linux | linux_kernel | >= 5.11 < 5.15.65 | 5.15.65 |
| linux | linux_kernel | >= 5.16 < 5.19.7 | 5.19.7 |
| linux | linux_kernel | >= 5.5 < 5.10.141 | 5.10.141 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: pvrusb2: fix memory leak in pvr_probe
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-49982 [MEDIUM] kernel: media: pvrusb2: fix memory leak in pvr_probe
kernel: media: pvrusb2: fix memory leak in pvr_probe
In the Linux kernel, the following vulnerability has been resolved:
media: pvrusb2: fix memory leak in pvr_probe
The error handling code in pvr2_hdw_create forgets to unregister the
v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create,
it calls pvr2_context_destroy to destroy context, but mp->hdw is NULL,
which leads to that pvr2_hdw_destroy directly returns.
Fix this by adding v4l2_device_unregister to decrease the refcount of
usb interface.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enter
Debian
CVE-2022-49982: linux - In the Linux kernel, the following vulnerability has been resolved: media: pvru...
vendor_debian·2022·CVSS 5.5
CVE-2022-49982 [MEDIUM] CVE-2022-49982: linux - In the Linux kernel, the following vulnerability has been resolved: media: pvru...
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_create forgets to unregister the v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create, it calls pvr2_context_destroy to destroy context, but mp->hdw is NULL, which leads to that pvr2_hdw_destroy directly returns. Fix this by adding v4l2_device_unregister to decrease the refcount of usb interface.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.148-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
OSV
CVE-2022-49982: In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_c
osv·2025-06-18·CVSS 5.5
CVE-2022-49982 [MEDIUM] CVE-2022-49982: In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_c
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_create forgets to unregister the v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create, it calls pvr2_context_destroy to destroy context, but mp->hdw is NULL, which leads to that pvr2_hdw_destroy directly returns. Fix this by adding v4l2_device_unregister to decrease the refcount of usb interface.
GHSA
GHSA-xpgf-3r4f-4546: In the Linux kernel, the following vulnerability has been resolved:
media: pvrusb2: fix memory leak in pvr_probe
The error handling code in pvr2_hdw
ghsa_unreviewed·2025-06-18
CVE-2022-49982 [MEDIUM] CWE-401 GHSA-xpgf-3r4f-4546: In the Linux kernel, the following vulnerability has been resolved:
media: pvrusb2: fix memory leak in pvr_probe
The error handling code in pvr2_hdw
In the Linux kernel, the following vulnerability has been resolved:
media: pvrusb2: fix memory leak in pvr_probe
The error handling code in pvr2_hdw_create forgets to unregister the
v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create,
it calls pvr2_context_destroy to destroy context, but mp->hdw is NULL,
which leads to that pvr2_hdw_destroy directly returns.
Fix this by adding v4l2_device_unregister to decrease the refcount of
usb interface.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2fe46195d2f0d5d09ea65433aefe47a4d0d0ff4dhttps://git.kernel.org/stable/c/466b67c0543b2ae67814d053f6e29b39be6b33bbhttps://git.kernel.org/stable/c/491762b3250fb06a0c97b5198656ea48359eaeedhttps://git.kernel.org/stable/c/945a9a8e448b65bec055d37eba58f711b39f66f0https://git.kernel.org/stable/c/ba7dd8a9686a61a34b3a7b922ce721378d4740d0https://git.kernel.org/stable/c/bacb37bdc2a21c8f7fdc83dcc0dea2f4ca1341fbhttps://git.kernel.org/stable/c/c02d2a91a85c4c4d05826cd1ea74a9b8d42e4280https://git.kernel.org/stable/c/f2f6e67522916f53ad8ccd4dbe68dcf76e9776e5
2025-06-18
Published