Memory Leak Vulnerability in DWC2 USB Driver for Linux Kernel

CVE-2022-49713

Summary

A memory leak vulnerability was identified in the DWC2 USB driver within the Linux kernel. When initializing the hardware, memory is allocated for the Host Controller Driver (HCD). However, if the platform resource retrieval fails, the corresponding memory is not released properly, leading to a potential accumulation of unreleased memory. A correction in the error handling flow has been implemented to ensure proper memory management and prevent this leak.

References