CVE-2022-50760: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()

Q: Which systems should be reviewed for this issue?

Review systems running the listed Linux kernel packages, including linux/kernel and the Ubuntu linux, linux-fips, linux-azure, linux-aws, linux-gcp, and linux-oracle variants, as well as Debian linux. The affected code is in the AMDGPU DRM driver path.

Q: Are fixed package or kernel versions provided?

No fixed version numbers are included in the available data. The listed stable-kernel references identify the upstream fixes, but package-level remediation status cannot be determined from this information alone.

Published Dec 24, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix PCI device refcount leak in amdgpuatrmgetbios()

As comment of pcigetclass() says, it returns a pcidevice with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL.

If we break the loop in amdgpuatrmgetbios() with 'pdev' not NULL, we need to call pcidevput() to decrease the refcount. Add the missing pcidevput() to avoid refcount leak.

Affected Software

181 affected componentsFixes available

linux-kernel

debian/linux<6.1.4-1

6.1.4-1

debian/linux<6.1.4-1

6.1.4-1

debian/linux<6.1.4-1

6.1.4-1

ubuntu/linux-azure<4.15.0-1162.177~14.04.1

4.15.0-1162.177~14.04.1

ubuntu/linux-aws*

ubuntu/linux-lts-xenial*

ubuntu/linux-aws-hwe<4.15.0-1153.166~16.04.1

4.15.0-1153.166~16.04.1

ubuntu/linux-azure<4.15.0-1162.177~16.04.1

4.15.0-1162.177~16.04.1

ubuntu/linux-gcp<4.15.0-1147.163~16.04.1

4.15.0-1147.163~16.04.1

ubuntu/linux-hwe<4.15.0-208.219~16.04.1

4.15.0-208.219~16.04.1

ubuntu/linux-oracle<4.15.0-1116.127~16.04.1

4.15.0-1116.127~16.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-fips*

ubuntu/linux<4.15.0-208.220

4.15.0-208.220

ubuntu/linux-aws<4.15.0-1153.166

4.15.0-1153.166

ubuntu/linux-aws-5.4<5.4.0-1097.105~18.04.1

5.4.0-1097.105~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1162.177

4.15.0-1162.177

ubuntu/linux-azure-5.4<5.4.0-1104.110~18.04.1

5.4.0-1104.110~18.04.1

ubuntu/linux-gcp-4.15<4.15.0-1147.163

4.15.0-1147.163

ubuntu/linux-gcp-5.4<5.4.0-1101.110~18.04.1

5.4.0-1101.110~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-144.161~18.04.1

5.4.0-144.161~18.04.1

ubuntu/linux-ibm-5.4<5.4.0-1045.50~18.04.1

5.4.0-1045.50~18.04.1

ubuntu/linux-kvm<4.15.0-1137.142

4.15.0-1137.142

ubuntu/linux-oracle<4.15.0-1116.127

4.15.0-1116.127

ubuntu/linux-oracle-5.4<5.4.0-1094.103~18.04.1

5.4.0-1094.103~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1081.92~18.04.1

5.4.0-1081.92~18.04.1

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2092.98

4.15.0-2092.98

ubuntu/linux-azure-fips<4.15.0-2071.77

4.15.0-2071.77

ubuntu/linux-fips<4.15.0-1108.119

4.15.0-1108.119

ubuntu/linux-gcp-fips<4.15.0-2055.60

4.15.0-2055.60

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-144.161

5.4.0-144.161

ubuntu/linux-aws<5.4.0-1097.105

5.4.0-1097.105

ubuntu/linux-aws-5.15<5.15.0-1033.37~20.04.1

5.15.0-1033.37~20.04.1

ubuntu/linux-azure<5.4.0-1104.110

5.4.0-1104.110

ubuntu/linux-azure-5.15<5.15.0-1035.42~20.04.1

5.15.0-1035.42~20.04.1

ubuntu/linux-bluefield<5.4.0-1059.65

5.4.0-1059.65

ubuntu/linux-gcp<5.4.0-1101.110

5.4.0-1101.110

ubuntu/linux-gcp-5.15<5.15.0-1031.38~20.04.1

5.15.0-1031.38~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-69.76~20.04.1

5.15.0-69.76~20.04.1

ubuntu/linux-ibm<5.4.0-1045.50

5.4.0-1045.50

ubuntu/linux-intel-iotg-5.15<5.15.0-1027.32~20.04.1

5.15.0-1027.32~20.04.1

ubuntu/linux-iot<5.4.0-1013.15

5.4.0-1013.15

ubuntu/linux-kvm<5.4.0-1087.93

5.4.0-1087.93

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-69.76~20.04.1

5.15.0-69.76~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1014.14~20.04.1

5.15.0-1014.14~20.04.1

ubuntu/linux-oracle<5.4.0-1094.103

5.4.0-1094.103

ubuntu/linux-oracle-5.15<5.15.0-1032.38~20.04.1

5.15.0-1032.38~20.04.1

ubuntu/linux-raspi<5.4.0-1081.92

5.4.0-1081.92

ubuntu/linux-riscv-5.15<5.15.0-1030.34~20.04.1

5.15.0-1030.34~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1022.26

5.4.0-1022.26

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1099.107+fips1

5.4.0-1099.107+fips1

ubuntu/linux-azure-fips<5.4.0-1104.110+fips1

5.4.0-1104.110+fips1

ubuntu/linux-fips<5.4.0-1073.82

5.4.0-1073.82

ubuntu/linux-gcp-fips<5.4.0-1101.110+fips1

5.4.0-1101.110+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-69.76

5.15.0-69.76

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1033.37

5.15.0-1033.37

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1035.42

5.15.0-1035.42

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1035.42.1

5.15.0-1035.42.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1031.38

5.15.0-1031.38

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1030.35

5.15.0-1030.35

ubuntu/linux-gkeop<5.15.0-1017.22

5.15.0-1017.22

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1027.30

5.15.0-1027.30

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1027.32

5.15.0-1027.32

ubuntu/linux-kvm<5.15.0-1030.35

5.15.0-1030.35

ubuntu/linux-lowlatency<5.15.0-69.76

5.15.0-69.76

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1023.23

5.15.0-1023.23

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1032.38

5.15.0-1032.38

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1026.28

5.15.0-1026.28

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-bluefield<5.15.0-1015.17

5.15.0-1015.17

ubuntu/linux-intel-iot-realtime<5.15.0-1023.28

5.15.0-1023.28

ubuntu/linux-realtime<5.15.0-1034.37

5.15.0-1034.37

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-nvidia-6.11*

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.8*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-6.14*

ubuntu/linux-vmware*

linux/kernel>=4.2.0<4.9.337

4.9.337

linux/kernel>=4.10.0<4.14.303

4.14.303

linux/kernel>=4.15.0<4.19.270

4.19.270

linux/kernel>=4.20.0<5.4.229

5.4.229

linux/kernel>=5.5.0<5.10.163

5.10.163

linux/kernel>=5.11.0<5.15.86

5.15.86

linux/kernel>=5.16.0<6.0.16

6.0.16

linux/kernel>=6.1.0<6.1.2

6.1.2

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.4-1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.177~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1153.166~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.177~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1147.163~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-208.219~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1116.127~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-208.220
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1153.166
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1097.105~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.177
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.110~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1147.163
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.110~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-144.161~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1045.50~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.142
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1116.127
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1094.103~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1081.92~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2092.98
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2071.77
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1108.119
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2055.60
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-144.161
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1097.105
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.37~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.110
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.42~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.65
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.110
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1031.38~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1045.50
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.32~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1013.15
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1087.93
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1014.14~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1094.103
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.38~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1081.92
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.34~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1022.26
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.107+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1104.110+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1073.82
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.110+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.37
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.42
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.42.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1031.38
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.35
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1017.22
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.30
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.32
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.35
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.23
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.38
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.28
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.17
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.28
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1034.37
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.9.337
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.14.303
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.19.270
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.4.229
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.163
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.86
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.0.16
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.2
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Compensating control
In amdgpu_atrm_get_bios(), call pci_dev_put() when breaking out of the loop with pdev non-NULL to decrease the PCI device reference count and prevent a refcount leak.

Event History

Dec 24, 2025

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Data Sourced

via OSV·01:05 PM

DescriptionAffected Software

Data Sourced

via NVD·01:16 PM

Description

Nov 11, 2026

Data Sourced

via OSV·09:37 AM

Severity

Frequently Asked Questions

Which systems should be reviewed for this issue?

Review systems running the listed Linux kernel packages, including linux/kernel and the Ubuntu linux, linux-fips, linux-azure, linux-aws, linux-gcp, and linux-oracle variants, as well as Debian linux. The affected code is in the AMDGPU DRM driver path.

Are fixed package or kernel versions provided?

No fixed version numbers are included in the available data. The listed stable-kernel references identify the upstream fixes, but package-level remediation status cannot be determined from this information alone.

CVE-2022-50760: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems should be reviewed for this issue?

Are fixed package or kernel versions provided?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be reviewed for this issue?

Are fixed package or kernel versions provided?