CVE-2022-49312

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/02/2025
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> staging: rtl8712: fix a potential memory leak in r871xu_drv_init()<br /> <br /> In r871xu_drv_init(), if r8712_init_drv_sw() fails, then the memory<br /> allocated by r8712_alloc_io_queue() in r8712_usb_dvobj_init() is not<br /> properly released as there is no action will be performed by<br /> r8712_usb_dvobj_deinit().<br /> To properly release it, we should call r8712_free_io_queue() in<br /> r8712_usb_dvobj_deinit().<br /> <br /> Besides, in r871xu_dev_remove(), r8712_usb_dvobj_deinit() will be called<br /> by r871x_dev_unload() under condition `padapter-&gt;bup` and<br /> r8712_free_io_queue() is called by r8712_free_drv_sw().<br /> However, r8712_usb_dvobj_deinit() does not rely on `padapter-&gt;bup` and<br /> calling r8712_free_io_queue() in r8712_free_drv_sw() is negative for<br /> better understading the code.<br /> So I move r8712_usb_dvobj_deinit() into r871xu_dev_remove(), and remove<br /> r8712_free_io_queue() from r8712_free_drv_sw().

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.10.122 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.47 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.17.15 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.18 (including) 5.18.4 (excluding)