CVE-2022-50544
published 2025-10-07CVE-2022-50544: In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
xhci_alloc_stream_info() allocates stream context array for stream_info
->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs,
stream_info->stream_ctx_array is not released, which will lead to a
memory leak.
We can fix it by releasing the stream_info->stream_ctx_array with
xhci_free_stream_ctx() on the error path to avoid the potential memory
leak.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < 7fc6bab3413e6a42bb1264ff7c9149808c93a4c7 | 7fc6bab3413e6a42bb1264ff7c9149808c93a4c7 |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < e702de2f5c893bf2cdb0152191f99a6ad1411823 | e702de2f5c893bf2cdb0152191f99a6ad1411823 |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < ddab9fe76296840aad686c66888a9c1dfdbff5ff | ddab9fe76296840aad686c66888a9c1dfdbff5ff |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < 9fa81cbd2dd300aa8fe9bac70e068b9a11cbb144 | 9fa81cbd2dd300aa8fe9bac70e068b9a11cbb144 |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < 91271a3e772e180bbb8afb114c72fd294a02f93d | 91271a3e772e180bbb8afb114c72fd294a02f93d |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < fcd594da0b5955119d9707e4e0a8d0fb1c969101 | fcd594da0b5955119d9707e4e0a8d0fb1c969101 |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < a40ad475236022f3432880e3091c380e46e71a71 | a40ad475236022f3432880e3091c380e46e71a71 |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < 782c873f8e7686f5b3c47e8b099f7e08c3dd1fdc | 782c873f8e7686f5b3c47e8b099f7e08c3dd1fdc |
| linux | linux | >= 8df75f42f8e67e2851cdcf6da91640fb881defd1 < 7e271f42a5cc3768cd2622b929ba66859ae21f97 | 7e271f42a5cc3768cd2622b929ba66859ae21f97 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 2.6.35 < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 4.10 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.0.2 usb xhci_alloc_stream_info memory leak (Nessus ID 284771 / WID-SEC-2025-2229)
vuldb·2026-04-20·CVSS 5.5
CVE-2022-50544 [MEDIUM] Linux Kernel up to 6.0.2 usb xhci_alloc_stream_info memory leak (Nessus ID 284771 / WID-SEC-2025-2229)
A vulnerability classified as critical was found in Linux Kernel up to 6.0.2. The impacted element is the function xhci_alloc_stream_info of the component usb. Such manipulation leads to memory leak.
This vulnerability is listed as CVE-2022-50544. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is advised.
GHSA
GHSA-529p-w982-9f3h: In the Linux kernel, the following vulnerability has been resolved:
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
xhci_allo
ghsa_unreviewed·2025-10-07
CVE-2022-50544 [MEDIUM] CWE-401 GHSA-529p-w982-9f3h: In the Linux kernel, the following vulnerability has been resolved:
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
xhci_allo
In the Linux kernel, the following vulnerability has been resolved:
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
xhci_alloc_stream_info() allocates stream context array for stream_info
->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs,
stream_info->stream_ctx_array is not released, which will lead to a
memory leak.
We can fix it by releasing the stream_info->stream_ctx_array with
xhci_free_stream_ctx() on the error path to avoid the potential memory
leak.
OSV
CVE-2022-50544: In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_
osv·2025-10-07·CVSS 5.5
CVE-2022-50544 [MEDIUM] CVE-2022-50544: In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs, stream_info->stream_ctx_array is not released, which will lead to a memory leak. We can fix it by releasing the stream_info->stream_ctx_array with xhci_free_stream_ctx() on the error path to avoid the potential memory leak.
Red Hat
kernel: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
vendor_redhat·2025-10-07·CVSS 5.5
CVE-2022-50544 [MEDIUM] CWE-772 kernel: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
kernel: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
In the Linux kernel, the following vulnerability has been resolved:
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
xhci_alloc_stream_info() allocates stream context array for stream_info
->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs,
stream_info->stream_ctx_array is not released, which will lead to a
memory leak.
We can fix it by releasing the stream_info->stream_ctx_array with
xhci_free_stream_ctx() on the error path to avoid the potential memory
leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt
Debian
CVE-2022-50544: linux - In the Linux kernel, the following vulnerability has been resolved: usb: host: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-50544 [MEDIUM] CVE-2022-50544: linux - In the Linux kernel, the following vulnerability has been resolved: usb: host: ...
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs, stream_info->stream_ctx_array is not released, which will lead to a memory leak. We can fix it by releasing the stream_info->stream_ctx_array with xhci_free_stream_ctx() on the error path to avoid the potential memory leak.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/782c873f8e7686f5b3c47e8b099f7e08c3dd1fdchttps://git.kernel.org/stable/c/7e271f42a5cc3768cd2622b929ba66859ae21f97https://git.kernel.org/stable/c/7fc6bab3413e6a42bb1264ff7c9149808c93a4c7https://git.kernel.org/stable/c/91271a3e772e180bbb8afb114c72fd294a02f93dhttps://git.kernel.org/stable/c/9fa81cbd2dd300aa8fe9bac70e068b9a11cbb144https://git.kernel.org/stable/c/a40ad475236022f3432880e3091c380e46e71a71https://git.kernel.org/stable/c/ddab9fe76296840aad686c66888a9c1dfdbff5ffhttps://git.kernel.org/stable/c/e702de2f5c893bf2cdb0152191f99a6ad1411823https://git.kernel.org/stable/c/fcd594da0b5955119d9707e4e0a8d0fb1c969101
2025-10-07
Published