GSD-2022-1004896

    Dashboard / Vulnerabilities / GSD-2022-1004896

    GSD-2022-1004896

    Published: 31 Jul 2022Last Modified: 22 Feb 2023

    Summary: usb: dwc2: Fix memory leak in dwc2_hcd_init

    Details: usb: dwc2: Fix memory leak in dwc2_hcd_init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.285 by commit 981ee40649e5fd9550f82db1fbb3bfab037da346, it was introduced in version v4.14.250 by commit 4b7f4a0eb92bf37bea4cd838c7f83ea42823ca8b. For more details please see the references link.

    References:

    Affected packages

    Package

    Name: Kernel

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 4b7f4a0eb92bf37bea4cd838c7f83ea42823ca8b
    Fixed -None

    Affected versions

    v4.14.250
    v4.14.251
    v4.14.252
    v4.14.253
    v4.14.254
    v4.14.255
    v4.14.256
    v4.14.257
    v4.14.258
    v4.14.259
    v4.14.260
    v4.14.261
    v4.14.262
    v4.14.263
    v4.14.264
    v4.14.265
    v4.14.266
    v4.14.267
    v4.14.268
    v4.14.269
    v4.14.270
    v4.14.271
    v4.14.272
    v4.14.273
    v4.14.274
    v4.14.275
    v4.14.276
    v4.14.277
    v4.14.278
    v4.14.279
    v4.14.280
    v4.14.281
    v4.14.282
    v4.14.283
    v4.14.284

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GSD-2022-1004896 | CVE-DB