Riskcovery

CVE-2022-48973

gpio: amd8111: Fix PCI device reference count leak

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Aug 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: amd8111: Fix PCI device reference count leak

for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL.

If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() after the 'out' label. Since pci_dev_put() can handle NULL input parameter, there is no problem for the 'Device not found' branch. For the normal path, add pci_dev_put() in amd_gpio_exit().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before 4749c5cc147c9860b96db1e71cc36d1de1bd3f59Affected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before 71d591ef873f9ebb86cd8d053b3caee785b2de6aAffected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before b2bc053ebbba57a06fa655db5ea796de2edce445Affected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before 48bd5d3801f6b67cc144449d434abbd5043a6d37Affected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before 5ee6413d3dd972930af787b2c0c7aaeb379fa521Affected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before 4271515f189bd5fe2ec86b4089dab7cb804625d2Affected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before e364ce04d8f840478b09eee57b614de7cf1e743eAffected
  • f942a7de047d8c599cc1a9a26293c8c7400450ea to before 45fecdb9f658d9c82960c98240bc0770ade19acaAffected
LinuxLinux
  • 3.6Affected
  • before 3.6Not affected
  • 4.9.336 through 4.9.*Not affected
  • 4.14.302 through 4.14.*Not affected
  • 4.19.269 through 4.19.*Not affected
  • 5.4.227 through 5.4.*Not affected
  • 5.10.159 through 5.10.*Not affected
  • 5.15.83 through 5.15.*Not affected
  • 6.0.13 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.