Memory Leak Vulnerability in Linux Kernel Affecting USB Host Controller

CVE-2022-50544

What is CVE-2022-50544?

A memory leak vulnerability was discovered in the Linux kernel's USB host controller, specifically in the xhci_alloc_stream_info function. When an error occurs during the allocation of the stream context array, the associated resources are not properly released. As a result, this leads to a potential memory leak, which can degrade system performance over time. This vulnerability was addressed by ensuring that the stream context array is correctly released in the event of an error, thereby mitigating the risk of memory leakage.

References