PT-2025-8594 · Linux+2 · Linux Kernel+2
Rhett Aultman
·
Publicado
2022-07-04
·
Atualizado
2025-10-23
·
CVE-2022-49661
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak issue has been identified in the Linux kernel, specifically in the gs usb driver. The driver allocates USB request blocks (URBs) for RX using
usb alloc coherent(), but fails to properly free them using usb kill anchored urbs(), resulting in a potential leak of DMA memory. This issue is similar to a previously identified memory leak in the esd usb2 driver. The fix involves explicitly freeing the RX URBs and their DMA memory via a call to usb free coherent() in the gs can close() function.Recommendations
For the Linux kernel, apply the patch that fixes the memory leak issue by explicitly freeing the RX URBs and their DMA memory via a call to
usb free coherent() in the gs can close() function.Exploit
Correção
Memory Leak
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Suse