5.5

CVE-2025-71154

net: usb: rtl8150: fix memory leak on usb_submit_urb() failure

In the Linux kernel, the following vulnerability has been resolved:

net: usb: rtl8150: fix memory leak on usb_submit_urb() failure

In async_set_registers(), when usb_submit_urb() fails, the allocated
  async_req structure and URB are not freed, causing a memory leak.

  The completion callback async_set_reg_cb() is responsible for freeing
  these allocations, but it is only called after the URB is successfully
  submitted and completes (successfully or with error). If submission
  fails, the callback never runs and the memory is leaked.

  Fix this by freeing both the URB and the request structure in the error
  path when usb_submit_urb() fails.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.10.1 < 5.10.248
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.198
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.160
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.120
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.64
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.4
Linux ≫ Linux Kernel Version3.10 Update-
Linux ≫ Linux Kernel Version3.10 Updaterc3
Linux ≫ Linux Kernel Version3.10 Updaterc4
Linux ≫ Linux Kernel Version3.10 Updaterc5
Linux ≫ Linux Kernel Version3.10 Updaterc6
Linux ≫ Linux Kernel Version3.10 Updaterc7
Linux ≫ Linux Kernel Version6.19 Updaterc1
Linux ≫ Linux Kernel Version6.19 Updaterc2
Linux ≫ Linux Kernel Version6.19 Updaterc3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.018
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/a4e2442d3c48355a84463342f397134f149936d7
Patch
https://git.kernel.org/stable/c/2f966186b99550e3c665dbfb87b8314e30acea02
Patch
https://git.kernel.org/stable/c/db2244c580540306d60ce783ed340190720cd429
Patch
https://git.kernel.org/stable/c/4bd4ea3eb326608ffc296db12c105f92dc2f2190
Patch
https://git.kernel.org/stable/c/6492ad6439ff1a479fc94dc6052df3628faed8b6
Patch
https://git.kernel.org/stable/c/151403e903840c9cf06754097b6732c14f26c532
Patch
https://git.kernel.org/stable/c/12cab1191d9890097171156d06bfa8d31f1e39c8
Patch