Back to CVE records
Not yet scoredPublished Dec 30, 2025

CVE-2022-50809xhci: dbc: Fix memory leak in xhci_alloc_dbc()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: xhci: dbc: Fix memory leak in xhci_alloc_dbc() If DbC is already in use, then the allocated memory for the xhci_dbc struct doesn't get freed before returning NULL, which leads to a memleak.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 23, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from d7afb4a13f6c6ee7df7d0bfc67b4ef19ece6d802 before 103b459590e1eb4d80b02761eb36c7cae1d9b58e; 534675942e901959b5d8dc11ea526c4e48817d8e builds before 116d6a6964986ea7eb516daa36128d270f1f248d; 534675942e901959b5d8dc11ea526c4e48817d8e builds before 69e67c804d09a6b1bcda1f4f242f151f813eeb4a; from 534675942e901959b5d8dc11ea526c4e48817d8e before d591b32e519603524a35b172156db71df9116902; from 5.15.58 before 5.15.75
CNA record

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.