Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails. But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked. Add kfree(ulpi) on both error paths to properly clean up the allocation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 2f70ba9dae13a190673cc3f9b4aad52179738f60 before 0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c; affected ee248e6e941e4f2e634df2bd43e5f1ef810ab6df before f1b855c00988a9cb41134cab7cf9faedba775dd9; affected 272a9b26c336a295e4e209157fed809706c1b1f7 before 7bd61ed0bf9f4f1f2673d489b3bda1555b48d054; affected aaeae6533d77e6ed4def85baec01e2815ebbef61 before b0c0d44adb55c66663886cb6e30ee92cbb0f5385; affected 8763f8317bb389aded32a32b08f6751cfff657d2 before be2c1d825f54277472c87019e82013ac534ddc4c; affected 38c28fe25611099230f0965c925499bfcf46a795 before 2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d; affected 01af542392b5d41fd659d487015a71f627accce3 before f30ccfc2985590b33a23a3d8bed7ca16c0af551b; affected 01af542392b5d41fd659d487015a71f627accce3 before 0b9fcab1b8608d429e5f239afb197de928d4de7d; affected a6e5461f076c2ef63159f18e5cdbd30b50f0bc15; affected 5.10.253 before 5.10.258; affected 5.15.203 before 5.15.209; affected 6.1.168 before 6.1.175; affected 6.6.134 before 6.6.140; affected 6.12.81 before 6.12.88; affected 6.18.22 before 6.18.30; affected 6.19.12 before 6.20 |
| Linux / Linux | affected 7.0; unaffected 0 before 7.0; unaffected 5.10.258 through 5.10.*; unaffected 5.15.209 through 5.15.*; unaffected 6.1.175 through 6.1.*; unaffected 6.6.140 through 6.6.*; unaffected 6.12.88 through 6.12.*; unaffected 6.18.30 through 6.18.*; unaffected 7.0.7 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c
- https://git.kernel.org/stable/c/f1b855c00988a9cb41134cab7cf9faedba775dd9
- https://git.kernel.org/stable/c/7bd61ed0bf9f4f1f2673d489b3bda1555b48d054
- https://git.kernel.org/stable/c/b0c0d44adb55c66663886cb6e30ee92cbb0f5385
- https://git.kernel.org/stable/c/be2c1d825f54277472c87019e82013ac534ddc4c
- https://git.kernel.org/stable/c/2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d
- https://git.kernel.org/stable/c/f30ccfc2985590b33a23a3d8bed7ca16c0af551b
- https://git.kernel.org/stable/c/0b9fcab1b8608d429e5f239afb197de928d4de7d