PT-2025-8244

CVE-2022-49310

·

Published

2022-01-01

·

Updated

2025-04-14

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A refcount leak issue has been identified in the Linux kernel, specifically in the xillybus char driver. The problem arises from the use of usb get dev in xillyusb probe, which requires a corresponding call to usb put dev before the device xdev is released to prevent the leak.
Recommendations For the affected Linux kernel version, consider applying the fix that includes calling usb put dev before releasing xdev to mitigate the refcount leak issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
SUSE-SU-2025:1027-1
SUSE-SU-2025_1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
Found an issue in the description? Have something to add? Feel free to write us 👾