xhci: dbc: Fix memory leak in xhci_alloc_dbc()
Published Dec 30, 2025
5.5
MEDIUMCVSS 3.1
EPSS 0.24%
Description
If DbC is already in use, then the allocated memory for the xhci_dbc struct doesn't get freed before returning NULL, which leads to a memleak.
Affected products
-
Affected
- ≥ 5.15.58, < 5.15.75
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 5.18
Unaffected
- ≥ 0, < 5.18
- ≥ 5.15.75, ≤ 5.15.*
- ≥ 5.19.17, ≤ 5.19.*
- ≥ 6.0.3, ≤ 6.0.*
- 6.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
No data.
No data.
Red Hat Enterprise Linux 8
kernel-0:4.18.0-513.5.1.el8_9
Fixed · RHSA-2023:7077
Red Hat Enterprise Linux 10
kernel
Not affected
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Fix deferred
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | kernel-0:4.18.0-513.5.1.el8_9 | Fixed | RHSA-2023:7077 |
| Red Hat Enterprise Linux 10 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (10)
- https://access.redhat.com/security/cve/CVE-2022-50809 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2426028 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-55889 Advisory
- https://git.kernel.org/stable/c/103b459590e1eb4d80b02761eb36c7cae1d9b58e
- https://git.kernel.org/stable/c/116d6a6964986ea7eb516daa36128d270f1f248d
- https://git.kernel.org/stable/c/69e67c804d09a6b1bcda1f4f242f151f813eeb4a
- https://git.kernel.org/stable/c/d591b32e519603524a35b172156db71df9116902
- https://lore.kernel.org/linux-cve-announce/2025123012-CVE-2022-50809-e4a0@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2022-50809
- https://www.cve.org/CVERecord?id=CVE-2022-50809
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data