CVE-2022-50484
published 2025-10-04CVE-2022-50484: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential memory leaks
When the driver hits -ENOMEM at allocating a URB or a buffer, it
aborts and goes to the error path that releases the all previously
allocated resources. However, when -ENOMEM hits at the middle of the
sync EP URB allocation loop, the partially allocated URBs might be
left without released, because ep->nurbs is still zero at that point.
Fix it by setting ep->nurbs at first, so that the error handler loops
over the full URB list.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < 0604e5e5537af099ea2f6dfd892afe5c92db8a80 | 0604e5e5537af099ea2f6dfd892afe5c92db8a80 |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < 28d8d267af5d73f91d7640cbdb4024703256e36c | 28d8d267af5d73f91d7640cbdb4024703256e36c |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < 46f0aed47673e275d682af60ed26dcc28add8eae | 46f0aed47673e275d682af60ed26dcc28add8eae |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < 988ec0cd0a2643c25c1658f7c33de2e15a5a2e31 | 988ec0cd0a2643c25c1658f7c33de2e15a5a2e31 |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < bc1d16d282bca421c6fc31de4b8fd412010f01bd | bc1d16d282bca421c6fc31de4b8fd412010f01bd |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < 0672215994e2347a9b4f145e2bc1709b1e01cee3 | 0672215994e2347a9b4f145e2bc1709b1e01cee3 |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < faa8c1ed77d0169955b9b3516b714cc5fb512f27 | faa8c1ed77d0169955b9b3516b714cc5fb512f27 |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < e4442410f76d66b9f7e854010bce04853f665324 | e4442410f76d66b9f7e854010bce04853f665324 |
| linux | linux | >= 8fdff6a319e7dac757c558bd283dc4577e68cde7 < 6382da0828995af87aa8b8bef28cc61aceb4aff3 | 6382da0828995af87aa8b8bef28cc61aceb4aff3 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 3.5 < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 4.10 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ALSA: usb-audio: Fix potential memory leaks
vendor_redhat·2025-10-04·CVSS 5.5
CVE-2022-50484 [MEDIUM] CWE-911 kernel: ALSA: usb-audio: Fix potential memory leaks
kernel: ALSA: usb-audio: Fix potential memory leaks
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential memory leaks
When the driver hits -ENOMEM at allocating a URB or a buffer, it
aborts and goes to the error path that releases the all previously
allocated resources. However, when -ENOMEM hits at the middle of the
sync EP URB allocation loop, the partially allocated URBs might be
left without released, because ep->nurbs is still zero at that point.
Fix it by setting ep->nurbs at first, so that the error handler loops
over the full URB list.
A memory leak was found in the Linux kernel's USB audio driver in the synchronization endpoint URB allocation path. When memory allocation fails partway through allocating URBs for a sync endpoint, the
Debian
CVE-2022-50484: linux - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-a...
vendor_debian·2022·CVSS 5.5
CVE-2022-50484 [MEDIUM] CVE-2022-50484: linux - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-a...
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at the middle of the sync EP URB allocation loop, the partially allocated URBs might be left without released, because ep->nurbs is still zero at that point. Fix it by setting ep->nurbs at first, so that the error handler loops over the full URB list.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
GHSA
GHSA-fp6r-c5g5-wqvg: In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential memory leaks
When the driver hits -ENOMEM at allo
ghsa_unreviewed·2025-10-04
CVE-2022-50484 [MEDIUM] CWE-401 GHSA-fp6r-c5g5-wqvg: In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential memory leaks
When the driver hits -ENOMEM at allo
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential memory leaks
When the driver hits -ENOMEM at allocating a URB or a buffer, it
aborts and goes to the error path that releases the all previously
allocated resources. However, when -ENOMEM hits at the middle of the
sync EP URB allocation loop, the partially allocated URBs might be
left without released, because ep->nurbs is still zero at that point.
Fix it by setting ep->nurbs at first, so that the error handler loops
over the full URB list.
OSV
CVE-2022-50484: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at alloca
osv·2025-10-04·CVSS 5.5
CVE-2022-50484 [MEDIUM] CVE-2022-50484: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at alloca
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at the middle of the sync EP URB allocation loop, the partially allocated URBs might be left without released, because ep->nurbs is still zero at that point. Fix it by setting ep->nurbs at first, so that the error handler loops over the full URB list.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0604e5e5537af099ea2f6dfd892afe5c92db8a80https://git.kernel.org/stable/c/0672215994e2347a9b4f145e2bc1709b1e01cee3https://git.kernel.org/stable/c/28d8d267af5d73f91d7640cbdb4024703256e36chttps://git.kernel.org/stable/c/46f0aed47673e275d682af60ed26dcc28add8eaehttps://git.kernel.org/stable/c/6382da0828995af87aa8b8bef28cc61aceb4aff3https://git.kernel.org/stable/c/988ec0cd0a2643c25c1658f7c33de2e15a5a2e31https://git.kernel.org/stable/c/bc1d16d282bca421c6fc31de4b8fd412010f01bdhttps://git.kernel.org/stable/c/e4442410f76d66b9f7e854010bce04853f665324https://git.kernel.org/stable/c/faa8c1ed77d0169955b9b3516b714cc5fb512f27
2025-10-04
Published