Memory Leak Vulnerability in Linux Kernel's NFC Driver

CVE-2022-49729

Summary

A memory leak issue was discovered in the NFC driver of the Linux kernel, specifically within the nfcmrvl component. The vulnerability arose due to improper handling when submitting deferred transmission URBs (USB Request Blocks) after unanchoring them. As a result, the system did not correctly release memory associated with these URBs, which could lead to excessive resource consumption. This issue has been addressed by implementing a fix that ensures deferred transmission URBs are properly managed and handled, effectively mitigating the risk of resource leaks.

References