CVE-2022-49011

hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it after using to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	14513ee696a0cd12a19318e433b75a786808adc3 to before bb75a0d1223d43f97089841aecb28a9b4de687a9Affected 14513ee696a0cd12a19318e433b75a786808adc3 to before 0dd1da5a15eeecb2fe4cf131b3216fb455af783cAffected 14513ee696a0cd12a19318e433b75a786808adc3 to before 2f74cffc7c85f770b1b1833dccb03b8cde3be102Affected 14513ee696a0cd12a19318e433b75a786808adc3 to before ea5844f946b1ec5c0b7c115cd7684f34fd48021bAffected 14513ee696a0cd12a19318e433b75a786808adc3 to before c40db1e5f316792b557d2be37e447c20d9ac4635Affected 14513ee696a0cd12a19318e433b75a786808adc3 to before 6e035d5a2a6b907cfce9a80c5f442c2e459cd34eAffected 14513ee696a0cd12a19318e433b75a786808adc3 to before f598da27acbeee414679cacd14294db3e273e3d2Affected 14513ee696a0cd12a19318e433b75a786808adc3 to before 7dec14537c5906b8bf40fd6fd6d9c3850f8df11dAffected
LinuxLinux	3.14Affected before 3.14Not affected 4.9.335 through 4.9.Not affected 4.14.301 through 4.14.Not affected 4.19.268 through 4.19.Not affected 5.4.226 through 5.4.Not affected 5.10.158 through 5.10.Not affected 5.15.82 through 5.15.Not affected 6.0.12 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

14513ee696a0cd12a19318e433b75a786808adc3 to before bb75a0d1223d43f97089841aecb28a9b4de687a9Affected
14513ee696a0cd12a19318e433b75a786808adc3 to before 0dd1da5a15eeecb2fe4cf131b3216fb455af783cAffected
14513ee696a0cd12a19318e433b75a786808adc3 to before 2f74cffc7c85f770b1b1833dccb03b8cde3be102Affected
14513ee696a0cd12a19318e433b75a786808adc3 to before ea5844f946b1ec5c0b7c115cd7684f34fd48021bAffected
14513ee696a0cd12a19318e433b75a786808adc3 to before c40db1e5f316792b557d2be37e447c20d9ac4635Affected
14513ee696a0cd12a19318e433b75a786808adc3 to before 6e035d5a2a6b907cfce9a80c5f442c2e459cd34eAffected
14513ee696a0cd12a19318e433b75a786808adc3 to before f598da27acbeee414679cacd14294db3e273e3d2Affected
14513ee696a0cd12a19318e433b75a786808adc3 to before 7dec14537c5906b8bf40fd6fd6d9c3850f8df11dAffected

LinuxLinux

3.14Affected
before 3.14Not affected
4.9.335 through 4.9.*Not affected
4.14.301 through 4.14.*Not affected
4.19.268 through 4.19.*Not affected
5.4.226 through 5.4.*Not affected
5.10.158 through 5.10.*Not affected
5.15.82 through 5.15.*Not affected
6.0.12 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.