CVE-2022-49713

usb: dwc2: Fix memory leak in dwc2_hcd_init

Description

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when platform_get_resource() fails to prevent memory leak. goto error2 label instead error1 to fix this.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.02%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/981ee40649e5fd9550f82db1fbb3bfab037da346 patch
https://git.kernel.org/stable/c/84e6d0af87e27bbc0db94f2e7323b34abe17b6e5 patch
https://git.kernel.org/stable/c/6506aff2dc2f7059aa3d45ee2e8639b25e87090f patch
https://git.kernel.org/stable/c/a44a8a762f7fe9ad3c065813d058e835a6180cb2 patch
https://git.kernel.org/stable/c/701d8ec01e0f229d4db6f43d3d64ee479120cbeb patch
https://git.kernel.org/stable/c/52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfd patch
https://git.kernel.org/stable/c/3755278f078460b021cd0384562977bf2039a57a patch

Frequently Asked Questions

What is the severity of CVE-2022-49713?
CVE-2022-49713 has been scored as a medium severity vulnerability.
How to fix CVE-2022-49713?
To fix CVE-2022-49713, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49713 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-49713 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49713?
CVE-2022-49713 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.