{"id":"CVE-2022-49981","state":"PUBLISHED","title":"HID: hidraw: fix memory leak in hidraw_release()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hidraw: fix memory leak in hidraw_release()\n\nFree the buffered reports before deleting the list entry.\n\nBUG: memory leak\nunreferenced object 0xffff88810e72f180 (size 32):\n  comm \"softirq\", pid 0, jiffies 4294945143 (age 16.080s)\n  hex dump (first 32 bytes):\n    64 f3 c6 6a d1 88 07 04 00 00 00 00 00 00 00 00  d..j............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<ffffffff814ac6c3>] kmemdup+0x23/0x50 mm/util.c:128\n    [<ffffffff8357c1d2>] kmemdup include/linux/fortify-string.h:440 [inline]\n    [<ffffffff8357c1d2>] hidraw_report_event+0xa2/0x150 drivers/hid/hidraw.c:521\n    [<ffffffff8356ddad>] hid_report_raw_event+0x27d/0x740 drivers/hid/hid-core.c:1992\n    [<ffffffff8356e41e>] hid_input_report+0x1ae/0x270 drivers/hid/hid-core.c:2065\n    [<ffffffff835f0d3f>] hid_irq_in+0x1ff/0x250 drivers/hid/usbhid/hid-core.c:284\n    [<ffffffff82d3c7f9>] __usb_hcd_giveback_urb+0xf9/0x230 drivers/usb/core/hcd.c:1670\n    [<ffffffff82d3cc26>] usb_hcd_giveback_urb+0x1b6/0x1d0 drivers/usb/core/hcd.c:1747\n    [<ffffffff82ef1e14>] dummy_timer+0x8e4/0x14c0 drivers/usb/gadget/udc/dummy_hcd.c:1988\n    [<ffffffff812f50a8>] call_timer_fn+0x38/0x200 kernel/time/timer.c:1474\n    [<ffffffff812f5586>] expire_timers kernel/time/timer.c:1519 [inline]\n    [<ffffffff812f5586>] __run_timers.part.0+0x316/0x430 kernel/time/timer.c:1790\n    [<ffffffff812f56e4>] __run_timers kernel/time/timer.c:1768 [inline]\n    [<ffffffff812f56e4>] run_timer_softirq+0x44/0x90 kernel/time/timer.c:1803\n    [<ffffffff848000e6>] __do_softirq+0xe6/0x2ea kernel/softirq.c:571\n    [<ffffffff81246db0>] invoke_softirq kernel/softirq.c:445 [inline]\n    [<ffffffff81246db0>] __irq_exit_rcu kernel/softirq.c:650 [inline]\n    [<ffffffff81246db0>] irq_exit_rcu+0xc0/0x110 kernel/softirq.c:662\n    [<ffffffff84574f02>] sysvec_apic_timer_interrupt+0xa2/0xd0 arch/x86/kernel/apic/apic.c:1106\n    [<ffffffff84600c8b>] asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649\n    [<ffffffff8458a070>] native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]\n    [<ffffffff8458a070>] arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]\n    [<ffffffff8458a070>] acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]\n    [<ffffffff8458a070>] acpi_idle_do_entry+0xc0/0xd0 drivers/acpi/processor_idle.c:554","publishedAt":"2025-06-18T11:00:43.351Z","updatedAt":"2026-05-11T19:10:26.217Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"1bea0bbf66001b0c7bf239a4d70eaf47824d3feb","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"c06b013f5cbfeafe0a9cfa5a7128604c34e0e517","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"f5b7e9611cffec345d62d5bdd8b6e30e89956818","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"53c7c4d5d40b45c127cb1193bf3e9670f844c3cf","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"7e2fa79226580b035b00260d9f240ab9bda4af5d","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"dfd27a737283313a3e626e97b9d9b2d8d6a94188","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"52a3c62a815161c2dcf38ac421f6c41d8679462b","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"a5623a203cffe2d2b84d2f6c989d9017db1856af","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hidraw.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.24","versionType":"semver"},{"version":"4.9.327","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.292","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.257","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.212","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.141","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.65","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.19.7","status":"unaffected","lessThanOrEqual":"5.19.*","versionType":"semver"},{"version":"6.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hidraw.c"]}],"references":["https://git.kernel.org/stable/c/1bea0bbf66001b0c7bf239a4d70eaf47824d3feb","https://git.kernel.org/stable/c/c06b013f5cbfeafe0a9cfa5a7128604c34e0e517","https://git.kernel.org/stable/c/f5b7e9611cffec345d62d5bdd8b6e30e89956818","https://git.kernel.org/stable/c/53c7c4d5d40b45c127cb1193bf3e9670f844c3cf","https://git.kernel.org/stable/c/7e2fa79226580b035b00260d9f240ab9bda4af5d","https://git.kernel.org/stable/c/dfd27a737283313a3e626e97b9d9b2d8d6a94188","https://git.kernel.org/stable/c/52a3c62a815161c2dcf38ac421f6c41d8679462b","https://git.kernel.org/stable/c/a5623a203cffe2d2b84d2f6c989d9017db1856af"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49981.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49981","state":"PUBLISHED","datePublished":"2025-06-18T11:00:43.351Z","dateUpdated":"2026-05-11T19:10:26.217Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-06-18T10:57:27.385Z"},"containers":{"cna":{"title":"HID: hidraw: fix memory leak in hidraw_release()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hidraw: fix memory leak in hidraw_release()\n\nFree the buffered reports before deleting the list entry.\n\nBUG: memory leak\nunreferenced object 0xffff88810e72f180 (size 32):\n  comm \"softirq\", pid 0, jiffies 4294945143 (age 16.080s)\n  hex dump (first 32 bytes):\n    64 f3 c6 6a d1 88 07 04 00 00 00 00 00 00 00 00  d..j............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<ffffffff814ac6c3>] kmemdup+0x23/0x50 mm/util.c:128\n    [<ffffffff8357c1d2>] kmemdup include/linux/fortify-string.h:440 [inline]\n    [<ffffffff8357c1d2>] hidraw_report_event+0xa2/0x150 drivers/hid/hidraw.c:521\n    [<ffffffff8356ddad>] hid_report_raw_event+0x27d/0x740 drivers/hid/hid-core.c:1992\n    [<ffffffff8356e41e>] hid_input_report+0x1ae/0x270 drivers/hid/hid-core.c:2065\n    [<ffffffff835f0d3f>] hid_irq_in+0x1ff/0x250 drivers/hid/usbhid/hid-core.c:284\n    [<ffffffff82d3c7f9>] __usb_hcd_giveback_urb+0xf9/0x230 drivers/usb/core/hcd.c:1670\n    [<ffffffff82d3cc26>] usb_hcd_giveback_urb+0x1b6/0x1d0 drivers/usb/core/hcd.c:1747\n    [<ffffffff82ef1e14>] dummy_timer+0x8e4/0x14c0 drivers/usb/gadget/udc/dummy_hcd.c:1988\n    [<ffffffff812f50a8>] call_timer_fn+0x38/0x200 kernel/time/timer.c:1474\n    [<ffffffff812f5586>] expire_timers kernel/time/timer.c:1519 [inline]\n    [<ffffffff812f5586>] __run_timers.part.0+0x316/0x430 kernel/time/timer.c:1790\n    [<ffffffff812f56e4>] __run_timers kernel/time/timer.c:1768 [inline]\n    [<ffffffff812f56e4>] run_timer_softirq+0x44/0x90 kernel/time/timer.c:1803\n    [<ffffffff848000e6>] __do_softirq+0xe6/0x2ea kernel/softirq.c:571\n    [<ffffffff81246db0>] invoke_softirq kernel/softirq.c:445 [inline]\n    [<ffffffff81246db0>] __irq_exit_rcu kernel/softirq.c:650 [inline]\n    [<ffffffff81246db0>] irq_exit_rcu+0xc0/0x110 kernel/softirq.c:662\n    [<ffffffff84574f02>] sysvec_apic_timer_interrupt+0xa2/0xd0 arch/x86/kernel/apic/apic.c:1106\n    [<ffffffff84600c8b>] asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:649\n    [<ffffffff8458a070>] native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]\n    [<ffffffff8458a070>] arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]\n    [<ffffffff8458a070>] acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]\n    [<ffffffff8458a070>] acpi_idle_do_entry+0xc0/0xd0 drivers/acpi/processor_idle.c:554"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"1bea0bbf66001b0c7bf239a4d70eaf47824d3feb","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"c06b013f5cbfeafe0a9cfa5a7128604c34e0e517","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"f5b7e9611cffec345d62d5bdd8b6e30e89956818","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"53c7c4d5d40b45c127cb1193bf3e9670f844c3cf","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"7e2fa79226580b035b00260d9f240ab9bda4af5d","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"dfd27a737283313a3e626e97b9d9b2d8d6a94188","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"52a3c62a815161c2dcf38ac421f6c41d8679462b","versionType":"git"},{"version":"86166b7bcda0bcb53525114fa1c87ac432be478e","status":"affected","lessThan":"a5623a203cffe2d2b84d2f6c989d9017db1856af","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hidraw.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.24","versionType":"semver"},{"version":"4.9.327","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.292","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.257","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.212","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.141","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.65","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.19.7","status":"unaffected","lessThanOrEqual":"5.19.*","versionType":"semver"},{"version":"6.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/hid/hidraw.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/1bea0bbf66001b0c7bf239a4d70eaf47824d3feb"},{"url":"https://git.kernel.org/stable/c/c06b013f5cbfeafe0a9cfa5a7128604c34e0e517"},{"url":"https://git.kernel.org/stable/c/f5b7e9611cffec345d62d5bdd8b6e30e89956818"},{"url":"https://git.kernel.org/stable/c/53c7c4d5d40b45c127cb1193bf3e9670f844c3cf"},{"url":"https://git.kernel.org/stable/c/7e2fa79226580b035b00260d9f240ab9bda4af5d"},{"url":"https://git.kernel.org/stable/c/dfd27a737283313a3e626e97b9d9b2d8d6a94188"},{"url":"https://git.kernel.org/stable/c/52a3c62a815161c2dcf38ac421f6c41d8679462b"},{"url":"https://git.kernel.org/stable/c/a5623a203cffe2d2b84d2f6c989d9017db1856af"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:10:26.217Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"4.9.327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"4.14.292"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"4.19.257"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"5.4.212"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"5.10.141"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"5.15.65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"5.19.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.24","versionEndExcluding":"6.0"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}