CVE-2022-49787

mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()

pci_get_device() will increase the reference count for the returned pci_dev. We need to use pci_dev_put() to decrease the reference count before amd_probe() returns. There is no problem for the 'smbus_dev == NULL' branch because pci_dev_put() can also handle the NULL input parameter case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 7570e5b5419ffd34b6dc45a88c51e113a9a187e3Affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 5dbd6378dbf96787d6dbcca44156c511ae085ea3Affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 27f712cd47d65e14cd52cc32a23d42aeef583d5dAffected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 4423866d31a06a810db22062ed13389416a66b22Affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before a99a547658e5d451f01ed307426286716b6f01bfAffected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 35bca18092685b488003509fef7055aa2d4f2ebcAffected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 222cfa0118aa68687ace74aab8fdf77ce8fbd7e6Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.14.300 through 4.14.Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.156 through 5.10.Not affected 5.15.80 through 5.15.Not affected 6.0.10 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 7570e5b5419ffd34b6dc45a88c51e113a9a187e3Affected
659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 5dbd6378dbf96787d6dbcca44156c511ae085ea3Affected
659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 27f712cd47d65e14cd52cc32a23d42aeef583d5dAffected
659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 4423866d31a06a810db22062ed13389416a66b22Affected
659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before a99a547658e5d451f01ed307426286716b6f01bfAffected
659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 35bca18092685b488003509fef7055aa2d4f2ebcAffected
659c9bc114a810b3a3c1e50585cc57f1312a6d60 to before 222cfa0118aa68687ace74aab8fdf77ce8fbd7e6Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.14.300 through 4.14.*Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.156 through 5.10.*Not affected
5.15.80 through 5.15.*Not affected
6.0.10 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.