CVE-2022-50520: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeonatrmgetbios()
As comment of pcigetclass() says, it returns a pcidevice with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL.
If we break the loop in radeonatrmgetbios() with 'pdev' not NULL, we need to call pcidevput() to decrease the refcount. Add the missing pcidevput() to avoid refcount leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50520?
CVE-2022-50520 has been classified as a high severity vulnerability due to its potential impact on system stability and resource management.
How do I fix CVE-2022-50520?
To fix CVE-2022-50520, you should update your Linux kernel to a version where the vulnerability has been patched.
What systems are affected by CVE-2022-50520?
CVE-2022-50520 affects multiple versions of the Linux kernel, specifically versions between 3.2.29 and 6.1.2.
What are the consequences of CVE-2022-50520 being exploited?
Exploitation of CVE-2022-50520 can lead to a reference count leak, resulting in potential denial-of-service conditions or resource exhaustion.
When was CVE-2022-50520 disclosed?
CVE-2022-50520 was disclosed along with its fix during the regular kernel updates by the Linux kernel maintainers.