← Database

CVE-2022-49389

MEDIUM CVSS: 5.5 Published: 2025-02-26 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stub_probe() usb_get_dev() is called in stub_device_alloc(). When stub_probe() fails after that, usb_put_dev() needs to be called to release the reference. Fix this by moving usb_put_dev() to sdev_free error path handling. Find this by code review.

Affected Platforms

Linux Linux Kernel

Weakness Type

NVD-CWE-Other

References