CVE-2022-50544

usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()

State: Published
Severity: Not scored
Published: Oct 7, 2025
Updated: May 11, 2026
Reserved: Oct 7, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()

xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xhci_alloc_stream_ctx(). When some error occurs, stream_info->stream_ctx_array is not released, which will lead to a memory leak.

We can fix it by releasing the stream_info->stream_ctx_array with xhci_free_stream_ctx() on the error path to avoid the potential memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 7fc6bab3413e6a42bb1264ff7c9149808c93a4c7Affected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before e702de2f5c893bf2cdb0152191f99a6ad1411823Affected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before ddab9fe76296840aad686c66888a9c1dfdbff5ffAffected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 9fa81cbd2dd300aa8fe9bac70e068b9a11cbb144Affected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 91271a3e772e180bbb8afb114c72fd294a02f93dAffected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before fcd594da0b5955119d9707e4e0a8d0fb1c969101Affected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before a40ad475236022f3432880e3091c380e46e71a71Affected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 782c873f8e7686f5b3c47e8b099f7e08c3dd1fdcAffected 8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 7e271f42a5cc3768cd2622b929ba66859ae21f97Affected
LinuxLinux	2.6.35Affected before 2.6.35Not affected 4.9.331 through 4.9.Not affected 4.14.296 through 4.14.Not affected 4.19.262 through 4.19.Not affected 5.4.220 through 5.4.Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 7fc6bab3413e6a42bb1264ff7c9149808c93a4c7Affected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before e702de2f5c893bf2cdb0152191f99a6ad1411823Affected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before ddab9fe76296840aad686c66888a9c1dfdbff5ffAffected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 9fa81cbd2dd300aa8fe9bac70e068b9a11cbb144Affected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 91271a3e772e180bbb8afb114c72fd294a02f93dAffected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before fcd594da0b5955119d9707e4e0a8d0fb1c969101Affected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before a40ad475236022f3432880e3091c380e46e71a71Affected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 782c873f8e7686f5b3c47e8b099f7e08c3dd1fdcAffected
8df75f42f8e67e2851cdcf6da91640fb881defd1 to before 7e271f42a5cc3768cd2622b929ba66859ae21f97Affected

LinuxLinux

2.6.35Affected
before 2.6.35Not affected
4.9.331 through 4.9.*Not affected
4.14.296 through 4.14.*Not affected
4.19.262 through 4.19.*Not affected
5.4.220 through 5.4.*Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.