CVE-2022-49661

Source
https://cve.org/CVERecord?id=CVE-2022-49661
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49661.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49661
Downstream
Related
Published
2025-02-26T02:23:58.352Z
Modified
2026-03-12T03:25:34.579431Z
Summary
can: gs_usb: gs_usb_open/close(): fix memory leak
Details

In the Linux kernel, the following vulnerability has been resolved:

can: gsusb: gsusb_open/close(): fix memory leak

The gsusb driver appears to suffer from a malady common to many USB CAN adapter drivers in that it performs usballoccoherent() to allocate a number of USB request blocks (URBs) for RX, and then later relies on usbkillanchoredurbs() to free them, but this doesn't actually free them. As a result, this may be leaking DMA memory that's been used by the driver.

This commit is an adaptation of the techniques found in the esdusb2 driver where a similar design pattern led to a memory leak. It explicitly frees the RX URBs and their DMA memory via a call to usbfreecoherent(). Since the RX URBs were allocated in the gscanopen(), we remove them in gscanclose() rather than in the disconnect function as was done in esdusb2.

For more information, see the 928150fad41b ("can: esd_usb2: fix memory leak").

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49661.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d08e973a77d128b25e01a08c34d89593fdf222da
Fixed
339fa9f80d3b94177a7a459c6d115d3b56007d5a
Fixed
c1d806bc29ff7ffe0e2a023583c8720ed96cb0b0
Fixed
d91492638b054f4a359621ef216242be5973ed6b
Fixed
6f655b5e13fa4b27e915b6c209ac0da74fd75963
Fixed
d0b8e223998866b3e7b2895927d4e9689b0a80d8
Fixed
0e60230bc64355c80abe993d1719fdb318094e20
Fixed
ffb6cc6601ec7c8fa963dcf76025df4a02f2cf5c
Fixed
2bda24ef95c0311ab93bda00db40486acf30bd0a

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49661.json"