NetSight
medium5.5

CVE-2022-49982

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_create for…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_create forgets to unregister the v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create, it calls pvr2_context_destroy to destroy context, but mp->hdw is NULL, which leads to that pvr2_hdw_destroy directly returns. Fix this by adding v4l2_device_unregister to decrease the refcount of usb interface.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.327
from 4.10 before 4.14.292
from 4.15 before 4.19.257
from 4.20 before 5.4.212
from 5.5 before 5.10.141
from 5.11 before 5.15.65

Weakness classification

References