CVE-2022-50162

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50162
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: Fix possible refcount leak in if_usb_probe() usb_get_dev will be called before lbs_get_firmware_async which means that usb_put_dev need to be called when lbs_get_firmware_async fails.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/00d0c4e59c0f8ad1f86874bb64b220394e687028 Patch
https://git.kernel.org/stable/c/4c8e2f9ce1428e44cb103035eeced7aeb6b80980 Patch
https://git.kernel.org/stable/c/5b92f406a5199b6b01dc664b9226d824ae2835f0 Patch
https://git.kernel.org/stable/c/61b2ec97487399c58ae2e34f250f4884e671799b Patch
https://git.kernel.org/stable/c/6fd57e1d120bf13d4dc6c200a7cf914e6347a316 Patch
https://git.kernel.org/stable/c/878e7f39803a9ab5bb9766956a7a04351d4bf99d Patch
https://git.kernel.org/stable/c/97e5d3e46a3a2100253a9717a4df98d68aeb10b8 Patch
https://git.kernel.org/stable/c/d7365590d15bbd9008f424ef043d1778ffe29f42 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 21:19

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE NVD-CWE-Other
References () https://git.kernel.org/stable/c/00d0c4e59c0f8ad1f86874bb64b220394e687028 - () https://git.kernel.org/stable/c/00d0c4e59c0f8ad1f86874bb64b220394e687028 - Patch
References () https://git.kernel.org/stable/c/4c8e2f9ce1428e44cb103035eeced7aeb6b80980 - () https://git.kernel.org/stable/c/4c8e2f9ce1428e44cb103035eeced7aeb6b80980 - Patch
References () https://git.kernel.org/stable/c/5b92f406a5199b6b01dc664b9226d824ae2835f0 - () https://git.kernel.org/stable/c/5b92f406a5199b6b01dc664b9226d824ae2835f0 - Patch
References () https://git.kernel.org/stable/c/61b2ec97487399c58ae2e34f250f4884e671799b - () https://git.kernel.org/stable/c/61b2ec97487399c58ae2e34f250f4884e671799b - Patch
References () https://git.kernel.org/stable/c/6fd57e1d120bf13d4dc6c200a7cf914e6347a316 - () https://git.kernel.org/stable/c/6fd57e1d120bf13d4dc6c200a7cf914e6347a316 - Patch
References () https://git.kernel.org/stable/c/878e7f39803a9ab5bb9766956a7a04351d4bf99d - () https://git.kernel.org/stable/c/878e7f39803a9ab5bb9766956a7a04351d4bf99d - Patch
References () https://git.kernel.org/stable/c/97e5d3e46a3a2100253a9717a4df98d68aeb10b8 - () https://git.kernel.org/stable/c/97e5d3e46a3a2100253a9717a4df98d68aeb10b8 - Patch
References () https://git.kernel.org/stable/c/d7365590d15bbd9008f424ef043d1778ffe29f42 - () https://git.kernel.org/stable/c/d7365590d15bbd9008f424ef043d1778ffe29f42 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: libertas: se corrige una posible pérdida de recuento de referencias en if_usb_probe(). usb_get_dev se llamará antes de lbs_get_firmware_async, lo que significa que se debe llamar a usb_put_dev cuando lbs_get_firmware_async falla.

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-18 21:19

NVD link : CVE-2022-50162

Mitre link : CVE-2022-50162

CVE.ORG link : CVE-2022-50162

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other