CVE-2022-50318
perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.19.270, 5.4.229, 5.10.163, 5.12
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() pci_get_device() will increase the reference count for the returned 'dev'. We need to call pci_dev_put() to decrease the reference count. Since 'dev' is only used in pci_read_config_dword(), let's add pci_dev_put() right after it.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 4.19.189 · fixed in 4.19.270; From 5.4.115 · fixed in 5.4.229; From 5.10.33 · fixed in 5.10.163; From 5.11.17 · fixed in 5.12
- Linux Linux
5.12
References 7
git.kernel.org
- stable/c/5a96c10a56037db006ba6769307a9731cf6073be
- stable/c/e293263248f25c6b8aa1caf7c1103d40aa03311e
- stable/c/c0539d5d474ee6fa4ebc41f927a0f98f81244f25
- stable/c/3485f197518061371568f842405159aa9e4df551
- stable/c/48f32b9a74e2ac8e854bb87bfefdbc745125a123
- stable/c/bd66877c0b3b42eed0ecee0bd2a2a505c1e54177
- stable/c/1ff9dd6e7071a561f803135c1d684b13c7a7d01d