What’s Vulnerable › Vulnerabilities

CVE-2022-49729: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred Similar to the handling of play_deferred in commit 19cfe912c37b ("Bluetooth: btusb: Fix memory leak in play_deferred"), we thought a patch might be needed here as well. Currently usb_submit_urb is called directly to submit deferred tx urbs after unanchor them. So the usb_giveback_urb_bh would failed to unref it in usb_unanchor_urb and cause memory leak. Put those urbs in tx_anchor to avoid the leak, and also fix the error handling.

Affected products

• Linux kernel: before 4.9.320; from 4.10 before 4.14.285; from 4.15 before 4.19.249; from 4.20 before 5.4.200; from 5.5 before 5.10.124; from 5.11 before 5.15.49 — fixed in 4.14.285, 4.19.249, 4.9.320, 5.10.124, 5.15.49, 5.18.6

How to fix

Upgrade to a fixed version: Linux kernel 4.14.285, 4.19.249, 4.9.320, 5.10.124. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0eeec1a8b0cd38c47edeb042980a6aeacecf35ed
• https://git.kernel.org/stable/c/1eb0afecfb9cd0f38424b82bd9aaa542310934ee
• https://git.kernel.org/stable/c/3e7c7df6991ac349f2fa8540047757df666e610f
• https://git.kernel.org/stable/c/3eadc560c1919b8193d17334145dad9a917960e4
• https://git.kernel.org/stable/c/6616872cfe7f0474a22dd1f12699f95bcf81a54d
• https://git.kernel.org/stable/c/6b4d8b44e7163a77fe942f5b80e1651c1b78c537
• https://git.kernel.org/stable/c/8a4d480702b71184fabcf379b80bf7539716752e
• https://git.kernel.org/stable/c/f21f908347712b8288ffe83b531b5e977042b29c

Get alerted when CVE-2022-49729 or the next vulnerability affects your stack