CVE-2022-49310

Summary

In the Linux kernel, the following vulnerability has been resolved:

char: xillybus: fix a refcount leak in cleanup_dev()

usb_get_dev is called in xillyusb_probe. So it is better to call usb_put_dev before xdev is released.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa53d1202aef122894b6e46116a92174a9123db5d < bc8fceda3b89006e8a7dda8a097d36045d044c25affected
LinuxLinuxa53d1202aef122894b6e46116a92174a9123db5d < 21f1f167d727f3f857e26d509ef5a6d47fd31bc3affected
LinuxLinuxa53d1202aef122894b6e46116a92174a9123db5d < e277b95acdab84cd5d2f8d537a37aef6d21e988baffected
LinuxLinuxa53d1202aef122894b6e46116a92174a9123db5d < b67d19662fdee275c479d21853bc1239600a798faffected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References