Linux Kernel Refcount Leak Vulnerability in USB/IP Stub Probe Function

A refcount leak vulnerability has been identified in the Linux kernel's USB/IP subsystem. The issue arises in the stub_probe() function, where usb_get_dev() is called during the allocation of a stub device. If the stub_probe() function fails, usb_put_dev() must be invoked to release the reference. The vulnerability has been addressed by relocating usb_put_dev() to the error handling path of sdev_free.

Impact

Exploitation of this vulnerability could lead to a refcount leak, potentially causing memory management issues such as use-after-free vulnerabilities.