CVE-2022-50162

wifi: libertas: Fix possible refcount leak in if_usb_probe()

MEDIUM

5.5

CVSS Score

Published: June 18, 2025 at 11:03 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: Fix possible refcount leak in if_usb_probe() usb_get_dev will be called before lbs_get_firmware_async which means that usb_put_dev need to be called when lbs_get_firmware_async fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.5 ≤ v < 4.14.2913.5 ≤ v < 4.19.2563.5 ≤ v < 5.10.1373.5 ≤ v < 5.15.613.5 ≤ v < 5.18.183.5 ≤ v < 5.19.23.5 ≤ v < 5.4.2113.5 ≤ v < 6.04.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2115.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.5 ≤ v < 5.10.1373.5ce84bb69f50e6f6cfeabc9b965365290f4184417

Vendor states this is fixed in 00d0c4e59c0f8ad1f86874bb64b220394e687028 (fixed)

Vendor states this is fixed in 4c8e2f9ce1428e44cb103035eeced7aeb6b80980 (fixed)

Vendor states this is fixed in 5b92f406a5199b6b01dc664b9226d824ae2835f0 (fixed)

Vendor states this is fixed in 61b2ec97487399c58ae2e34f250f4884e671799b (fixed)

Vendor states this is fixed in 6fd57e1d120bf13d4dc6c200a7cf914e6347a316 (fixed)

Vendor states this is fixed in 878e7f39803a9ab5bb9766956a7a04351d4bf99d (fixed)

Vendor states this is fixed in 97e5d3e46a3a2100253a9717a4df98d68aeb10b8 (fixed)

Vendor states this is fixed in d7365590d15bbd9008f424ef043d1778ffe29f42 (fixed)

Vendor states this is fixed in 3.5 (unaffected)

Vendor states this is fixed in 4.14.291 (unaffected)

Vendor states this is fixed in 4.19.256 (unaffected)

Vendor states this is fixed in 5.10.137 (unaffected)