Medium 5.5Published Jan 23, 2026

CVE-2025-71154net: usb: rtl8150: fix memory leak on usb_submit_urb() failure

Updated under an hour ago (Oct 28, 2026, 5:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers(), when usb_submit_urb() fails, the allocated async_req structure and URB are not freed, causing a memory leak. The completion callback async_set_reg_cb() is responsible for freeing these allocations, but it is only called after the URB is successfully submitted and completes (successfully or with error). If submission fails, the callback never runs and the memory is leaked. Fix this by freeing both the URB and the request structure in the error path when usb_submit_urb() fails.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-401
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4d12997a9bb3d217ad4b925ec3074ec89364bf95 before a4e2442d3c48355a84463342f397134f149936d7; 4d12997a9bb3d217ad4b925ec3074ec89364bf95 builds before 2f966186b99550e3c665dbfb87b8314e30acea02; from 4d12997a9bb3d217ad4b925ec3074ec89364bf95 before db2244c580540306d60ce783ed340190720cd429; 4d12997a9bb3d217ad4b925ec3074ec89364bf95 builds before 4bd4ea3eb326608ffc296db12c105f92dc2f2190; from 4d12997a9bb3d217ad4b925ec3074ec89364bf95 before 6492ad6439ff1a479fc94dc6052df3628faed8b6; from 4d12997a9bb3d217ad4b925ec3074ec89364bf95 before 151403e903840c9cf06754097b6732c14f26c532; from 4d12997a9bb3d217ad4b925ec3074ec89364bf95 before 12cab1191d9890097171156d06bfa8d31f1e39c8	CNA record
linux linux_kernel linux:linux_kernel	from 3.10.1 before 5.10.248; from 5.11 before 5.15.198; from 5.16 before 6.1.160; from 6.2 before 6.6.120; from 6.7 before 6.12.64; from 6.13 before 6.18.4; 3.10; 3.10; and 7 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a4e2442d3c48355a84463342f397134f149936d7	patch
https://git.kernel.org/stable/c/2f966186b99550e3c665dbfb87b8314e30acea02	patch
https://git.kernel.org/stable/c/db2244c580540306d60ce783ed340190720cd429	patch
https://git.kernel.org/stable/c/4bd4ea3eb326608ffc296db12c105f92dc2f2190	patch
https://git.kernel.org/stable/c/6492ad6439ff1a479fc94dc6052df3628faed8b6	patch
https://git.kernel.org/stable/c/151403e903840c9cf06754097b6732c14f26c532	patch
https://git.kernel.org/stable/c/12cab1191d9890097171156d06bfa8d31f1e39c8	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.