CVE-2022-49389

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak was found in the Linux kernel's usbip stub probe() function. The issue occurs when usb get dev() is called in stub device alloc() and stub probe() fails afterwards, requiring usb put dev() to be called to release the reference. This was fixed by moving usb put dev() to the sdev free error path handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.