CVE-2022-49310

char: xillybus: fix a refcount leak in cleanup_dev()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

char: xillybus: fix a refcount leak in cleanup_dev()

usb_get_dev is called in xillyusb_probe. So it is better to call usb_put_dev before xdev is released.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a53d1202aef122894b6e46116a92174a9123db5d to before bc8fceda3b89006e8a7dda8a097d36045d044c25Affected a53d1202aef122894b6e46116a92174a9123db5d to before 21f1f167d727f3f857e26d509ef5a6d47fd31bc3Affected a53d1202aef122894b6e46116a92174a9123db5d to before e277b95acdab84cd5d2f8d537a37aef6d21e988bAffected a53d1202aef122894b6e46116a92174a9123db5d to before b67d19662fdee275c479d21853bc1239600a798fAffected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.