CVE-2022-50484

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50484
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50484.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50484
Downstream
Related
Published
2025-10-04T15:16:42.385Z
Modified
2026-03-12T03:26:33.875020Z
Summary
ALSA: usb-audio: Fix potential memory leaks
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix potential memory leaks

When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at the middle of the sync EP URB allocation loop, the partially allocated URBs might be left without released, because ep->nurbs is still zero at that point.

Fix it by setting ep->nurbs at first, so that the error handler loops over the full URB list.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50484.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8fdff6a319e7dac757c558bd283dc4577e68cde7
Fixed
0604e5e5537af099ea2f6dfd892afe5c92db8a80
Fixed
28d8d267af5d73f91d7640cbdb4024703256e36c
Fixed
46f0aed47673e275d682af60ed26dcc28add8eae
Fixed
988ec0cd0a2643c25c1658f7c33de2e15a5a2e31
Fixed
bc1d16d282bca421c6fc31de4b8fd412010f01bd
Fixed
0672215994e2347a9b4f145e2bc1709b1e01cee3
Fixed
faa8c1ed77d0169955b9b3516b714cc5fb512f27
Fixed
e4442410f76d66b9f7e854010bce04853f665324
Fixed
6382da0828995af87aa8b8bef28cc61aceb4aff3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50484.json"