Log in Start free

Vulnerability · Published Jan 23, 2026 · Assigned by Linux

CVE-2025-71154net: usb: rtl8150: fix memory leak on usb_submit_urb() failure

Medium 5.5

In plain English

A medium-severity memory leak in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.1%top 96.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers(), when usb_submit_urb() fails, the allocated async_req structure and URB are not freed, causing a memory leak. The completion callback async_set_reg_cb() is responsible for freeing these allocations, but it is only called after the URB is successfully submitted and completes (successfully or with error). If submission fails, the callback never runs and the memory is leaked. Fix this by freeing both the URB and the request structure in the error path when usb_submit_urb() fails.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.162-1DEBIAN-CVE-2025-71154
Debian:13linux6.12.69-1DEBIAN-CVE-2025-71154
Debian:14linux6.18.5-1DEBIAN-CVE-2025-71154
Ubuntu:22.04:LTSlinux5.15.0-173.183UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux6.8.0-110.110UBUNTU-CVE-2025-71154
Ubuntu:25.10linux6.17.0-22.22UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-aws5.15.0-1103.110UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-aws6.8.0-1052.55UBUNTU-CVE-2025-71154
Ubuntu:25.10linux-aws6.17.0-1012.12UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure5.15.0-1109.118UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure6.8.0-1054.60UBUNTU-CVE-2025-71154
Ubuntu:25.10linux-azure6.17.0-1013.13UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1013.13~24.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1109.118.1UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-71154
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gcp5.15.0-1103.112UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-gcp6.8.0-1054.57UBUNTU-CVE-2025-71154
Ubuntu:25.10linux-gcp6.17.0-1012.12UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1012.12~24.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gke5.15.0-1099.105UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-gke6.8.0-1050.56UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1086.94UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1037.40UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-22.22~24.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-ibm5.15.0-1097.100UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-ibm6.8.0-1051.51UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1051.51~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1098.104UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-kvm5.15.0-1095.100UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-173.183UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-110.110.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-110.110.1~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1098.99UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1051.54UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1018.18UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1051.54~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1051.54.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1055.55UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1022.22UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1044.44UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1020.20UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oracle5.15.0-1100.106UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oracle6.8.0-1049.50UBUNTU-CVE-2025-71154
Ubuntu:25.10linux-oracle6.17.0-1011.11UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1011.11~24.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1049.50~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-raspi5.15.0-1097.100UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-raspi6.8.0-1052.56UBUNTU-CVE-2025-71154
Ubuntu:25.10linux-raspi6.17.0-1013.13UBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-71154
Ubuntu:25.10linux-realtime6.17.0-1010.11UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-71154
Ubuntu:25.10linux-riscv6.17.0-22.22.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-22.22.1~24.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-110.110~22.04.1UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-71154
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-71154
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1067.71UBUNTU-CVE-2025-71154

Affected products (as reported)

VendorProductVersions
Linux Linux 4d12997a9bb3d217ad4b925ec3074ec89364bf95 – before a4e2442d3c48355a84463342f397134f149936d74d12997a9bb3d217ad4b925ec3074ec89364bf95 – before 2f966186b99550e3c665dbfb87b8314e30acea024d12997a9bb3d217ad4b925ec3074ec89364bf95 – before db2244c580540306d60ce783ed340190720cd4294d12997a9bb3d217ad4b925ec3074ec89364bf95 – before 4bd4ea3eb326608ffc296db12c105f92dc2f21904d12997a9bb3d217ad4b925ec3074ec89364bf95 – before 6492ad6439ff1a479fc94dc6052df3628faed8b64d12997a9bb3d217ad4b925ec3074ec89364bf95 – before 151403e903840c9cf06754097b6732c14f26c5324d12997a9bb3d217ad4b925ec3074ec89364bf95 – before 12cab1191d9890097171156d06bfa8d31f1e39c8
Linux Linux 3.10

Weakness: CWE-401

References