In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnetwritecmd_async() mixed up which buffers need to be freed in which error case.
v2: add Fixes tag v3: fix uninitialized buf pointer
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2022/49xxx/CVE-2022-49657.json"
}[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5165e657987ff4ba0ace896d4376a3718a9fbc3",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-04d25054",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db89582ff330556188da856e01382ccbf3a5e706",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-1fe23668",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5269209f54dd8dfd15f9383f3a3a1fe8370764f8",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-2ed9491f",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db89582ff330556188da856e01382ccbf3a5e706",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-327f102e",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5269209f54dd8dfd15f9383f3a3a1fe8370764f8",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-3710882e",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@04894ab34faf40ab72a8a5ab5b404bb0606bbbff",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-55a2ae7f",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3eed421ca5c809da93456f69203d164d5220be3d",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-6b6d8842",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7b4f69946a38209b4a4f660bf0e4cbed94f9b4b",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-909c4d06",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3eed421ca5c809da93456f69203d164d5220be3d",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-98ad95a4",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0085da9df3dced730027923a6b48f58e9016af91",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-a5236044",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5165e657987ff4ba0ace896d4376a3718a9fbc3",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-af2a7530",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@04894ab34faf40ab72a8a5ab5b404bb0606bbbff",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-b0d86bdc",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55a21b764c1e182014630fa5486d717484ac58f",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-b26a2d6a",
"target": {
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"line_hashes": [
"111946426730170580285997794394646436970",
"163038538761155808026718443885797169838",
"126051188883290790279178558304631965736",
"166287412327396428493749796460183614844",
"87131169682492682406724889064635738428",
"318515865498826983520914722659972762357",
"161319322267694862893515788149409324925",
"266153539335496474967535400127004247294",
"302175806193140609214816929903374069963",
"123780127094990570363632215734457365459",
"269044328629483166578762006390840585750",
"131877925828950679981680571947284085474",
"149740536176959695499434222159995336896",
"239732098442752821843063424588903343027",
"305759097589963628156282666868344810345",
"293669475610252538558401070661746801993",
"315713081339483784327867406352061186088",
"59520444341200215866855760012283175900"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e7b4f69946a38209b4a4f660bf0e4cbed94f9b4b",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-d24720ca",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0085da9df3dced730027923a6b48f58e9016af91",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-e30dccd3",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55a21b764c1e182014630fa5486d717484ac58f",
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2022-49657-f8c1ed2b",
"target": {
"function": "usbnet_write_cmd_async",
"file": "drivers/net/usb/usbnet.c"
},
"digest": {
"function_hash": "198465574124929156379617370977699190553",
"length": 1321.0
},
"signature_type": "Function"
}
]