GSD-2022-1006663

xhci: Remove device endpoints from bandwidth list when freeing the device

No score

xhci: Remove device endpoints from bandwidth list when freeing the device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit 3bf860a41e0f2fcea0ac3aae8f7ef887a7994b70. For more details please see the references link.

What each source reports

OSV No score

xhci: Remove device endpoints from bandwidth list when freeing the device

xhci: Remove device endpoints from bandwidth list when freeing the device

Record: GSD-2022-1006663
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`Kernel` Linux	Listed versions, plus commit ranges v2.6.12v2.6.12-rc2v2.6.12-rc3v2.6.12-rc4v2.6.12-rc5 Show 45 moreShow less v2.6.12-rc6v2.6.13v2.6.13-rc1v2.6.13-rc2v2.6.13-rc3v2.6.13-rc4v2.6.13-rc5v2.6.13-rc6v2.6.13-rc7v2.6.14v2.6.14-rc1v2.6.14-rc2v2.6.14-rc3v2.6.14-rc4v2.6.14-rc5v2.6.15v2.6.15-rc1v2.6.15-rc2v2.6.15-rc3v2.6.15-rc4v2.6.15-rc5v2.6.15-rc6v2.6.15-rc7v2.6.16v2.6.16-rc1v2.6.16-rc2v2.6.16-rc3v2.6.16-rc4v2.6.16-rc5v2.6.16-rc6v2.6.17v2.6.17-rc1v2.6.17-rc2v2.6.17-rc3v2.6.17-rc4v2.6.17-rc5v2.6.17-rc6v2.6.18v2.6.18-rc1v2.6.18-rc2v2.6.18-rc3v2.6.18-rc4v2.6.18-rc5v2.6.18-rc6v2.6.18-rc7	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GSD-2022-1006663 is a vulnerability with no CVSS score yet in Kernel, published November 14, 2022. No source lists public exploit code. No source names a fixed version.

This page doesn't list everything

Left out here: 716 versions. The JSON record has them.