CVE-2022-50760

drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()

N/A
Published: December 24, 2025 at 01:05 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in amdgpu_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.2 ≤ v < 4.14.3034.2 ≤ v < 4.19.2704.2 ≤ v < 4.9.3374.2 ≤ v < 5.10.1634.2 ≤ v < 5.15.864.2 ≤ v < 5.4.2294.2 ≤ v < 6.0.164.2 ≤ v < 6.1.24.2 ≤ v < 6.24.2d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Vendor states this is fixed in 3360125d721c91d697c71201f18f042ff743e936 (fixed)
Vendor states this is fixed in 6611feef35c0c8c4d297b28a7fc6ab3a2c47eca7 (fixed)
Vendor states this is fixed in 7c1ddf7c664b5bc91f14b1bdeaa45520ef1760e4 (fixed)
Vendor states this is fixed in 8f2d2badf8ca5e7e7c30d88840b695c8af7286f3 (fixed)
Vendor states this is fixed in 981024abf5fe605c94d4f906f65d1b3408d628be (fixed)
Vendor states this is fixed in 9d4057d0452243917e12eb19f1599c96f2f05b14 (fixed)
Vendor states this is fixed in a8b54ad7106c0604c4adc4933138b3557739bce0 (fixed)
Vendor states this is fixed in ca54639c7752edf1304d92ff4d0c049d4efc9ba0 (fixed)
Vendor states this is fixed in da7c78ea9e62bb65273d3ff19a3866ec205bfe18 (fixed)
Vendor states this is fixed in 4.14.303 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 4.9.337 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (9)

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card