CVE-2022-49312
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/02/2025
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
staging: rtl8712: fix a potential memory leak in r871xu_drv_init()<br />
<br />
In r871xu_drv_init(), if r8712_init_drv_sw() fails, then the memory<br />
allocated by r8712_alloc_io_queue() in r8712_usb_dvobj_init() is not<br />
properly released as there is no action will be performed by<br />
r8712_usb_dvobj_deinit().<br />
To properly release it, we should call r8712_free_io_queue() in<br />
r8712_usb_dvobj_deinit().<br />
<br />
Besides, in r871xu_dev_remove(), r8712_usb_dvobj_deinit() will be called<br />
by r871x_dev_unload() under condition `padapter->bup` and<br />
r8712_free_io_queue() is called by r8712_free_drv_sw().<br />
However, r8712_usb_dvobj_deinit() does not rely on `padapter->bup` and<br />
calling r8712_free_io_queue() in r8712_free_drv_sw() is negative for<br />
better understading the code.<br />
So I move r8712_usb_dvobj_deinit() into r871xu_dev_remove(), and remove<br />
r8712_free_io_queue() from r8712_free_drv_sw().
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10.122 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.47 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.17.15 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.18 (including) | 5.18.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/205e039fead72e87ad2838f5e649a4c4834f648b
- https://git.kernel.org/stable/c/5a89a92efc342dd7c44b6056da87debc598f9c73
- https://git.kernel.org/stable/c/7288ff561de650d4139fab80e9cb0da9b5b32434
- https://git.kernel.org/stable/c/8eb42d6d10f8fe509117859defddf9e72b4fa4d0
- https://git.kernel.org/stable/c/a2882b8baad068d21c99fb2ab5a85a2bdbd5b834



