CVE-2022-49310

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49310
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: fix a refcount leak in cleanup_dev() usb_get_dev is called in xillyusb_probe. So it is better to call usb_put_dev before xdev is released.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/21f1f167d727f3f857e26d509ef5a6d47fd31bc3 Patch
https://git.kernel.org/stable/c/b67d19662fdee275c479d21853bc1239600a798f Patch
https://git.kernel.org/stable/c/bc8fceda3b89006e8a7dda8a097d36045d044c25 Patch
https://git.kernel.org/stable/c/e277b95acdab84cd5d2f8d537a37aef6d21e988b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Mar 2025, 19:54

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/21f1f167d727f3f857e26d509ef5a6d47fd31bc3 - () https://git.kernel.org/stable/c/21f1f167d727f3f857e26d509ef5a6d47fd31bc3 - Patch
References () https://git.kernel.org/stable/c/b67d19662fdee275c479d21853bc1239600a798f - () https://git.kernel.org/stable/c/b67d19662fdee275c479d21853bc1239600a798f - Patch
References () https://git.kernel.org/stable/c/bc8fceda3b89006e8a7dda8a097d36045d044c25 - () https://git.kernel.org/stable/c/bc8fceda3b89006e8a7dda8a097d36045d044c25 - Patch
References () https://git.kernel.org/stable/c/e277b95acdab84cd5d2f8d537a37aef6d21e988b - () https://git.kernel.org/stable/c/e277b95acdab84cd5d2f8d537a37aef6d21e988b - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: char: xillybus: se corrige una pérdida de recuento de referencias en cleanup_dev(). Se llama a usb_get_dev en xillyusb_probe. Por lo tanto, es mejor llamar a usb_put_dev antes de que se publique xdev.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-17 19:54

NVD link : CVE-2022-49310

Mitre link : CVE-2022-49310

CVE.ORG link : CVE-2022-49310

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other