CVE-2022-49253: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49253 is a vulnerability in the Linux kernel's media subsystem, specifically in the USB go7007 s2250-board driver. The vulnerability was discovered and disclosed in February 2025. The issue affects the probe() function in the driver where a memory leak occurs due to improper device unregistration on error paths (NVD).

The vulnerability is a memory leak in the s2250-board driver's probe() function where i2cunregisterdevice(audio) was not being called on an error path. The issue was introduced in commit d3b2ccd9e307 '[media] s2250: convert to the control framework'. The fix involves properly handling error conditions by calling i2cunregisterdevice(audio) before returning from the error path (Kernel Commit).

The vulnerability could lead to memory leaks in the Linux kernel when using the affected USB go7007 s2250-board driver. This may result in resource exhaustion over time if the error condition is repeatedly triggered (Ubuntu Security).

The vulnerability has been fixed in various Linux kernel versions. Ubuntu has released patches for multiple kernel versions including 4.15.0-189.200 for 18.04 LTS and 4.15.0-1137.148 for other supported releases. Users are advised to update their kernel to the patched versions (Ubuntu Security).