CVE - CVE-2022-49312

CVE-ID
CVE-2022-49312	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix a potential memory leak in r871xu_drv_init() In r871xu_drv_init(), if r8712_init_drv_sw() fails, then the memory allocated by r8712_alloc_io_queue() in r8712_usb_dvobj_init() is not properly released as there is no action will be performed by r8712_usb_dvobj_deinit(). To properly release it, we should call r8712_free_io_queue() in r8712_usb_dvobj_deinit(). Besides, in r871xu_dev_remove(), r8712_usb_dvobj_deinit() will be called by r871x_dev_unload() under condition `padapter->bup` and r8712_free_io_queue() is called by r8712_free_drv_sw(). However, r8712_usb_dvobj_deinit() does not rely on `padapter->bup` and calling r8712_free_io_queue() in r8712_free_drv_sw() is negative for better understading the code. So I move r8712_usb_dvobj_deinit() into r871xu_dev_remove(), and remove r8712_free_io_queue() from r8712_free_drv_sw().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/205e039fead72e87ad2838f5e649a4c4834f648b URL:https://git.kernel.org/stable/c/205e039fead72e87ad2838f5e649a4c4834f648b MISC:https://git.kernel.org/stable/c/5a89a92efc342dd7c44b6056da87debc598f9c73 URL:https://git.kernel.org/stable/c/5a89a92efc342dd7c44b6056da87debc598f9c73 MISC:https://git.kernel.org/stable/c/7288ff561de650d4139fab80e9cb0da9b5b32434 URL:https://git.kernel.org/stable/c/7288ff561de650d4139fab80e9cb0da9b5b32434 MISC:https://git.kernel.org/stable/c/8eb42d6d10f8fe509117859defddf9e72b4fa4d0 URL:https://git.kernel.org/stable/c/8eb42d6d10f8fe509117859defddf9e72b4fa4d0 MISC:https://git.kernel.org/stable/c/a2882b8baad068d21c99fb2ab5a85a2bdbd5b834 URL:https://git.kernel.org/stable/c/a2882b8baad068d21c99fb2ab5a85a2bdbd5b834
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)