Skip to main content
← All vulnerabilities
CVE-2022-50520

drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 3.3, 3.5, 3.6
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 3.2.29 · fixed in 3.3; From 3.4.12 · fixed in 3.5; From 3.5.5 · fixed in 3.6; From 3.2.60 · fixed in 3.3

  • Linux Linux

    3.6

References 9

git.kernel.org