CVE-2022-49874

HID: hyperv: fix possible memory leak in mousevsc_probe()

State: Published
Severity: 5.5 Medium
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: hyperv: fix possible memory leak in mousevsc_probe()

If hid_add_device() returns error, it should call hid_destroy_device() to free hid_dev which is allocated in hid_allocate_device().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	74c4fb058083b47571a4f76dcfce95085f2d8098 to before ed75d1a1c31a0cae8ecc8bcea710b25c0be68da0Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before 249b743801c00542e9324f87b380032e957a43e8Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before a6d2fb1874c52ace1f5cf1966ee558829c5c19b6Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before e29289d0d8193fca6d2c1f0a1de75cfc80edec00Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before 8597b59e3d22b27849bd3e4f92a3d466774bfb04Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before 5ad95d71344b7ffec360d62591633b3c465dc049Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before 5f3aba6566b866f5b0a4916f0b2e8a6ae66a6451Affected 74c4fb058083b47571a4f76dcfce95085f2d8098 to before b5bcb94b0954a026bbd671741fdb00e7141f9c91Affected
LinuxLinux	3.3Affected before 3.3Not affected 4.9.334 through 4.9.Not affected 4.14.300 through 4.14.Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.155 through 5.10.Not affected 5.15.79 through 5.15.Not affected 6.0.9 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

74c4fb058083b47571a4f76dcfce95085f2d8098 to before ed75d1a1c31a0cae8ecc8bcea710b25c0be68da0Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before 249b743801c00542e9324f87b380032e957a43e8Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before a6d2fb1874c52ace1f5cf1966ee558829c5c19b6Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before e29289d0d8193fca6d2c1f0a1de75cfc80edec00Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before 8597b59e3d22b27849bd3e4f92a3d466774bfb04Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before 5ad95d71344b7ffec360d62591633b3c465dc049Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before 5f3aba6566b866f5b0a4916f0b2e8a6ae66a6451Affected
74c4fb058083b47571a4f76dcfce95085f2d8098 to before b5bcb94b0954a026bbd671741fdb00e7141f9c91Affected

LinuxLinux

3.3Affected
before 3.3Not affected
4.9.334 through 4.9.*Not affected
4.14.300 through 4.14.*Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.155 through 5.10.*Not affected
5.15.79 through 5.15.*Not affected
6.0.9 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.