{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2022-49981", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-49981", "idYear": 2022, "status": "PUBLISHED", "publishedAt": "2025-06-18T11:00:43.351Z", "updatedAt": "2026-05-11T19:10:26.217Z", "importedAt": "2026-10-24T01:56:49.724Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "HID: hidraw: fix memory leak in hidraw_release()", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hidraw: fix memory leak in hidraw_release()\n\nFree the buffered reports before deleting the list entry.\n\nBUG: memory leak\nunreferenced object 0xffff88810e72f180 (size 32):\n comm \"softirq\", pid 0, jiffies 4294945143 (age 16.080s)\n hex dump (first 32 bytes):\n 64 f3 c6 6a d1 88 07 04 00 00 00 00 00 00 00 00 d..j............\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmemdup+0x23/0x50 mm/util.c:128\n [] kmemdup include/linux/fortify-string.h:440 [inline]\n [] hidraw_report_event+0xa2/0x150 drivers/hid/hidraw.c:521\n [] hid_report_raw_event+0x27d/0x740 drivers/hid/hid-core.c:1992\n [] hid_input_report+0x1ae/0x270 drivers/hid/hid-core.c:2065\n [] hid_irq_in+0x1ff/0x250 drivers/hid/usbhid/hid-core.c:284\n [] __usb_hcd_giveback_urb+0xf9/0x230 drivers/usb/core/hcd.c:1670\n [] usb_hcd_giveback_urb+0x1b6/0x1d0 drivers/usb/core/hcd.c:1747\n [] dummy_timer+0x8e4/0x14c0 drivers/usb/gadget/udc/dummy_hcd.c:1988\n [] call_timer_fn+0x38/0x200 kernel/time/timer.c:1474\n [] expire_timers kernel/time/timer.c:1519 [inline]\n [] __run_timers.part.0+0x316/0x430 kernel/time/timer.c:1790\n [] __run_timers kernel/time/timer.c:1768 [inline]\n [] run_timer_softirq+0x44/0x90 kernel/time/timer.c:1803\n [] __do_softirq+0xe6/0x2ea kernel/softirq.c:571\n [] invoke_softirq kernel/softirq.c:445 [inline]\n [] __irq_exit_rcu kernel/softirq.c:650 [inline]\n [] irq_exit_rcu+0xc0/0x110 kernel/softirq.c:662\n [] sysvec_apic_timer_interrupt+0xa2/0xd0 arch/x86/kernel/apic/apic.c:1106\n [] asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649\n [] native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]\n [] arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]\n [] acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]\n [] acpi_idle_do_entry+0xc0/0xd0 drivers/acpi/processor_idle.c:554", "affected": [ { "vendor": "Linux", "product": "Linux", "defaultStatus": "unaffected", "versions": [ { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "1bea0bbf66001b0c7bf239a4d70eaf47824d3feb" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "c06b013f5cbfeafe0a9cfa5a7128604c34e0e517" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "f5b7e9611cffec345d62d5bdd8b6e30e89956818" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "53c7c4d5d40b45c127cb1193bf3e9670f844c3cf" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "7e2fa79226580b035b00260d9f240ab9bda4af5d" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "dfd27a737283313a3e626e97b9d9b2d8d6a94188" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "52a3c62a815161c2dcf38ac421f6c41d8679462b" }, { "version": "86166b7bcda0bcb53525114fa1c87ac432be478e", "status": "affected", "versionType": "git", "lessThan": "a5623a203cffe2d2b84d2f6c989d9017db1856af" } ] }, { "vendor": "Linux", "product": "Linux", "defaultStatus": "affected", "versions": [ { "version": "2.6.24", "status": "affected" }, { "version": "0", "status": "unaffected", "versionType": "semver", "lessThan": "2.6.24" }, { "version": "4.9.327", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "4.9.*" }, { "version": "4.14.292", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "4.14.*" }, { "version": "4.19.257", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "4.19.*" }, { "version": "5.4.212", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.4.*" }, { "version": "5.10.141", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.10.*" }, { "version": "5.15.65", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.15.*" }, { "version": "5.19.7", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.19.*" }, { "version": "6.0", "status": "unaffected", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*" } ] } ] } } }