CVE-2022-49011
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it after using to avoid refcount leak.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.14
References 8
git.kernel.org
- stable/c/bb75a0d1223d43f97089841aecb28a9b4de687a9
- stable/c/0dd1da5a15eeecb2fe4cf131b3216fb455af783c
- stable/c/2f74cffc7c85f770b1b1833dccb03b8cde3be102
- stable/c/ea5844f946b1ec5c0b7c115cd7684f34fd48021b
- stable/c/c40db1e5f316792b557d2be37e447c20d9ac4635
- stable/c/6e035d5a2a6b907cfce9a80c5f442c2e459cd34e
- stable/c/f598da27acbeee414679cacd14294db3e273e3d2
- stable/c/7dec14537c5906b8bf40fd6fd6d9c3850f8df11d