CVE-2022-50809

xhci: dbc: Fix memory leak in xhci_alloc_dbc()

N/A
Published: December 30, 2025 at 12:08 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: xhci: dbc: Fix memory leak in xhci_alloc_dbc() If DbC is already in use, then the allocated memory for the xhci_dbc struct doesn't get freed before returning NULL, which leads to a memleak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.15.58 ≤ v < 5.15.755.18 ≤ v < 5.19.175.18 ≤ v < 6.0.35.18 ≤ v < 6.15.15.585.18534675942e901959b5d8dc11ea526c4e48817d8ed7afb4a13f6c6ee7df7d0bfc67b4ef19ece6d802
Vendor states this is fixed in 103b459590e1eb4d80b02761eb36c7cae1d9b58e (fixed)
Vendor states this is fixed in 116d6a6964986ea7eb516daa36128d270f1f248d (fixed)
Vendor states this is fixed in 69e67c804d09a6b1bcda1f4f242f151f813eeb4a (fixed)
Vendor states this is fixed in d591b32e519603524a35b172156db71df9116902 (fixed)
Vendor states this is fixed in 5.15.75 (unaffected)
Vendor states this is fixed in 5.18 (unaffected)
Vendor states this is fixed in 5.19.17 (unaffected)
Vendor states this is fixed in 6.0.3 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card