CVE-2022-50520
MEDIUMLinux Kernel 3.2.29-3.3 - Denial of Service via PCI Device Refcount Leak
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.
References (9)
Core 9
Core References
Scores
CVSS v3
5.5
EPSS
0.0015
EPSS Percentile
5.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (38)
linux/Kernel
3.6.0 - 4.9.337linux
linux/Kernel
4.10.0 - 4.14.303linux
linux/Kernel
4.15.0 - 4.19.270linux
linux/Kernel
4.20.0 - 5.4.229linux
linux/Kernel
5.11.0 - 5.15.86linux
linux/Kernel
5.16.0 - 6.0.16linux
linux/Kernel
5.5.0 - 5.10.163linux
linux/Kernel
6.1.0 - 6.1.2linux
Linux/Linux
< 3.6
Linux/Linux
063ab9cb6308a0806d623c8d6dda5cb2b3b87fce
... and 28 more
Published
Oct 07, 2025
Tracked Since
Feb 18, 2026