CVE-2022-49729

nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred

Similar to the handling of play_deferred in commit 19cfe912c37b ("Bluetooth: btusb: Fix memory leak in play_deferred"), we thought a patch might be needed here as well.

Currently usb_submit_urb is called directly to submit deferred tx urbs after unanchor them.

So the usb_giveback_urb_bh would failed to unref it in usb_unanchor_urb and cause memory leak.

Put those urbs in tx_anchor to avoid the leak, and also fix the error handling.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 1eb0afecfb9cd0f38424b82bd9aaa542310934eeAffected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before f21f908347712b8288ffe83b531b5e977042b29cAffected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 3e7c7df6991ac349f2fa8540047757df666e610fAffected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 6b4d8b44e7163a77fe942f5b80e1651c1b78c537Affected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 0eeec1a8b0cd38c47edeb042980a6aeacecf35edAffected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 6616872cfe7f0474a22dd1f12699f95bcf81a54dAffected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 3eadc560c1919b8193d17334145dad9a917960e4Affected f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 8a4d480702b71184fabcf379b80bf7539716752eAffected
LinuxLinux	3.14Affected before 3.14Not affected 4.9.320 through 4.9.Not affected 4.14.285 through 4.14.Not affected 4.19.249 through 4.19.Not affected 5.4.200 through 5.4.Not affected 5.10.124 through 5.10.Not affected 5.15.49 through 5.15.Not affected 5.18.6 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 1eb0afecfb9cd0f38424b82bd9aaa542310934eeAffected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before f21f908347712b8288ffe83b531b5e977042b29cAffected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 3e7c7df6991ac349f2fa8540047757df666e610fAffected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 6b4d8b44e7163a77fe942f5b80e1651c1b78c537Affected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 0eeec1a8b0cd38c47edeb042980a6aeacecf35edAffected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 6616872cfe7f0474a22dd1f12699f95bcf81a54dAffected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 3eadc560c1919b8193d17334145dad9a917960e4Affected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to before 8a4d480702b71184fabcf379b80bf7539716752eAffected

LinuxLinux

3.14Affected
before 3.14Not affected
4.9.320 through 4.9.*Not affected
4.14.285 through 4.14.*Not affected
4.19.249 through 4.19.*Not affected
5.4.200 through 5.4.*Not affected
5.10.124 through 5.10.*Not affected
5.15.49 through 5.15.*Not affected
5.18.6 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.