CVE-2022-50337

ocxl: fix pci device refcount leak when calling get_function_0()

MEDIUM
5.5
CVSS Score
Published: September 15, 2025 at 02:49 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0() calls pci_get_domain_bus_and_slot(), as comment says, it returns a pci device with refcount increment, so after using it, pci_dev_put() needs be called. Get the device reference when get_function_0() is not called, so pci_dev_put() can be called in the error path and callers unconditionally. And add comment above get_dvsec_vendor0() to tell callers to call pci_dev_put().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.865.16 ≤ v < 6.0.165.9 ≤ v < 5.10.1635.9 ≤ v < 5.15.865.9 ≤ v < 6.0.165.9 ≤ v < 6.1.25.9 ≤ v < 6.26.1 ≤ v < 6.1.25.987db7579ebd5ded337056eb765542eb2608f16e3
Vendor states this is fixed in 27158c72678b39ee01cc01de1aba6b51c71abe2f (fixed)
Vendor states this is fixed in 37a13b274e4513c757e50c002ddcbf4bc89adbb2 (fixed)
Vendor states this is fixed in 40ff4c2335a98f0ee96b099bfd70b8e6644f321f (fixed)
Vendor states this is fixed in 9a1b3148975b71fdc194e62612478346bbe618cd (fixed)
Vendor states this is fixed in a40e1b0a922a53fa925ea8b296e3de30a31ed028 (fixed)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.9 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

References (5)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/27158c72678b39ee01cc01de1aba6b51c71abe2f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/37a13b274e4513c757e50c002ddcbf4bc89adbb2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/40ff4c2335a98f0ee96b099bfd70b8e6644f321f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9a1b3148975b71fdc194e62612478346bbe618cd
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a40e1b0a922a53fa925ea8b296e3de30a31ed028

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card