PT-2025-49613 · Linux+2 · Linux Kernel+2

Published 2025-12-09 · Updated 2026-02-24 · CVE-2022-50633

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the dwc3 qcom interconnect init function within the USB DWC3 Qualcomm component of the Linux kernel. The of icc get function allocates resources for a path handle, but these resources are not released under certain error conditions. This is corrected by adding icc put in the error handling path, mirroring the release mechanism in the dwc3 qcom interconnect exit function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50633

RHSA-2023:6583

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Dwc3 Qualcomm

Linux Kernel

Red Hat

References · 974

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50633.json · Exploit
• https://ubuntu.com/security/CVE-2022-50633 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50633 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50633 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50633 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50633 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50633 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note
• https://bugzilla.suse.com/1255007 · Note