github - ghsa-3p27-9p9g-q639

ghsa-3p27-9p9g-q639

Vulnerability from github

Published

2025-09-15 15:31

Modified

2025-09-15 15:31

Details

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

Can not set the @shared_hcd to NULL before decrease the usage count by usb_put_hcd(), this will cause the shared hcd not released.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-50247"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-09-15T14:15:35Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq\n\nCan not set the @shared_hcd to NULL before decrease the usage count\nby usb_put_hcd(), this will cause the shared hcd not released.",
  "id": "GHSA-3p27-9p9g-q639",
  "modified": "2025-09-15T15:31:22Z",
  "published": "2025-09-15T15:31:22Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50247"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/03a88b0bafbe3f548729d970d8366f48718c9b19"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/05680a91ae60ddd0319e6618456f0883b5dd765d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c8e7463844888dc8344bbb9cbad88cdce9cb8077"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ffb14aac2658873050671198543b9b8194149c14"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2022-50247 (GCVE-0-2022-50247)

Vulnerability from cvelistv5

Published

2025-09-15 14:02

Modified

2025-09-15 14:02

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @shared_hcd to NULL before decrease the usage count by usb_put_hcd(), this will cause the shared hcd not released.

References

URL

Tags

	https://git.kernel.org/stable/c/ffb14aac2658873050671198543b9b8194149c14
	https://git.kernel.org/stable/c/05680a91ae60ddd0319e6618456f0883b5dd765d
	https://git.kernel.org/stable/c/c8e7463844888dc8344bbb9cbad88cdce9cb8077
	https://git.kernel.org/stable/c/03a88b0bafbe3f548729d970d8366f48718c9b19

Impacted products

Vendor

Product

Version

Version: 04284eb74e0c350be5e75eda178b97063343af13
Version: 04284eb74e0c350be5e75eda178b97063343af13
Version: 04284eb74e0c350be5e75eda178b97063343af13
Version: 04284eb74e0c350be5e75eda178b97063343af13

Version: 5.13

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/host/xhci-mtk.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ffb14aac2658873050671198543b9b8194149c14",
              "status": "affected",
              "version": "04284eb74e0c350be5e75eda178b97063343af13",
              "versionType": "git"
            },
            {
              "lessThan": "05680a91ae60ddd0319e6618456f0883b5dd765d",
              "status": "affected",
              "version": "04284eb74e0c350be5e75eda178b97063343af13",
              "versionType": "git"
            },
            {
              "lessThan": "c8e7463844888dc8344bbb9cbad88cdce9cb8077",
              "status": "affected",
              "version": "04284eb74e0c350be5e75eda178b97063343af13",
              "versionType": "git"
            },
            {
              "lessThan": "03a88b0bafbe3f548729d970d8366f48718c9b19",
              "status": "affected",
              "version": "04284eb74e0c350be5e75eda178b97063343af13",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/host/xhci-mtk.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.86",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.16",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.2",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq\n\nCan not set the @shared_hcd to NULL before decrease the usage count\nby usb_put_hcd(), this will cause the shared hcd not released."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-15T14:02:06.776Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ffb14aac2658873050671198543b9b8194149c14"
        },
        {
          "url": "https://git.kernel.org/stable/c/05680a91ae60ddd0319e6618456f0883b5dd765d"
        },
        {
          "url": "https://git.kernel.org/stable/c/c8e7463844888dc8344bbb9cbad88cdce9cb8077"
        },
        {
          "url": "https://git.kernel.org/stable/c/03a88b0bafbe3f548729d970d8366f48718c9b19"
        }
      ],
      "title": "usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50247",
    "datePublished": "2025-09-15T14:02:06.776Z",
    "dateReserved": "2025-09-15T13:58:00.972Z",
    "dateUpdated": "2025-09-15T14:02:06.776Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.