CVE-2022-50318

perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()

State: Published
Severity: Not scored
Published: Sep 15, 2025
Updated: May 23, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()

pci_get_device() will increase the reference count for the returned 'dev'. We need to call pci_dev_put() to decrease the reference count. Since 'dev' is only used in pci_read_config_dword(), let's add pci_dev_put() right after it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a8e87042482fd2d31c5cee62875b2ae75759ae8b to before 5a96c10a56037db006ba6769307a9731cf6073beAffected 319a06e58ed7f1443f7133c05513de470f90628d to before e293263248f25c6b8aa1caf7c1103d40aa03311eAffected 6f8315e5d9511ed1cf28ee2afbc9f89ff693de7b to before c0539d5d474ee6fa4ebc41f927a0f98f81244f25Affected 9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before 3485f197518061371568f842405159aa9e4df551Affected 9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before 48f32b9a74e2ac8e854bb87bfefdbc745125a123Affected 9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before bd66877c0b3b42eed0ecee0bd2a2a505c1e54177Affected 9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before 1ff9dd6e7071a561f803135c1d684b13c7a7d01dAffected d2c79105a90323a2a93484c85f9ac419ae9b183dAffected 4.19.189 to before 4.19.270Affected 5.4.115 to before 5.4.229Affected 5.10.33 to before 5.10.163Affected 5.11.17 to before 5.12Affected
LinuxLinux	5.12Affected before 5.12Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

a8e87042482fd2d31c5cee62875b2ae75759ae8b to before 5a96c10a56037db006ba6769307a9731cf6073beAffected
319a06e58ed7f1443f7133c05513de470f90628d to before e293263248f25c6b8aa1caf7c1103d40aa03311eAffected
6f8315e5d9511ed1cf28ee2afbc9f89ff693de7b to before c0539d5d474ee6fa4ebc41f927a0f98f81244f25Affected
9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before 3485f197518061371568f842405159aa9e4df551Affected
9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before 48f32b9a74e2ac8e854bb87bfefdbc745125a123Affected
9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before bd66877c0b3b42eed0ecee0bd2a2a505c1e54177Affected
9d480158ee86ad606d3a8baaf81e6b71acbfd7d5 to before 1ff9dd6e7071a561f803135c1d684b13c7a7d01dAffected
d2c79105a90323a2a93484c85f9ac419ae9b183dAffected
4.19.189 to before 4.19.270Affected
5.4.115 to before 5.4.229Affected
5.10.33 to before 5.10.163Affected
5.11.17 to before 5.12Affected

LinuxLinux

5.12Affected
before 5.12Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.