CVE-2022-50633 Details
Description
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init of_icc_get() alloc resources for path handle, we should release it when not need anymore. Like the release in dwc3_qcom_interconnect_exit() function. Add icc_put() in error handling to fix this.
A memory leak vulnerability has been identified in the Linux kernel's DWC3 QCOM USB driver. The issue arises in the 'dwc3_qcom_interconnect_init' function, where resources allocated for the interconnect path handle are not properly released when no longer needed. This oversight contrasts with the correct release process implemented in the 'dwc3_qcom_interconnect_exit' function. The vulnerability has been addressed by adding an 'icc_put' call in the error handling process, ensuring that allocated resources are properly freed.
Users can upgrade to the patched version of the Linux kernel where this vulnerability has been addressed. The specific commit containing the fix is '97a48da1619ba6bd42a0e5da0a03aa490a9496b1', which is available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 9, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2f3b51189f7a7be5d822fb8c537d778c57eb9821 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/56f6de394f0f57928cd401255a5c7866b68a77e3 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/8c39c8d23ff9fb1beb6e16cf0ae929c764538625 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/97a48da1619ba6bd42a0e5da0a03aa490a9496b1 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/f9089b95548f0272e02a89989c511e235561d051 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
| usb: dwc3: qcom | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 9, 2025 | New CVE Received | kernel.org |