Riskcovery

CVE-2022-50357

usb: dwc3: core: fix some leaks in probe

State
Published
Severity
5.5 Medium
Published
Sep 17, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: core: fix some leaks in probe

The dwc3_get_properties() function calls:

dwc->usb_psy = power_supply_get_by_name(usb_psy_name);

so there is some additional clean up required on these error paths.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 6f0764b5adea18d70c3fab32d5f940678bcbd865 to before 79c3afb55942368921237d7b5355d48c52bdde20Affected
  • 6f0764b5adea18d70c3fab32d5f940678bcbd865 to before 3a213503f483173e7eea76f2e7e3bdd6df7fd6f8Affected
  • 6f0764b5adea18d70c3fab32d5f940678bcbd865 to before 2a735e4b5580a2a6bbd6572109b4c4f163c57462Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.19.17 through 5.19.*Not affected
  • 6.0.3 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.