CVE-2022-50505

iommu/amd: Fix pci device refcount leak in ppr_notifier()

State: Published
Severity: Not scored
Published: Oct 4, 2025
Updated: May 11, 2026
Reserved: Oct 4, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Fix pci device refcount leak in ppr_notifier()

As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it before returning from ppr_notifier() to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	daae2d25a4779b272a66ddd01f5810bcee822b9e to before bdb2113dd8f17a3cc84a2b4be4968a849f69ec72Affected daae2d25a4779b272a66ddd01f5810bcee822b9e to before efd50c65fd1cdef63eb58825f3fe72496443764cAffected daae2d25a4779b272a66ddd01f5810bcee822b9e to before 8581ec1feb895ff596fe3d326d9ba320083290aaAffected daae2d25a4779b272a66ddd01f5810bcee822b9e to before 03f51c72997559e73b327608f0cccfded715c9a0Affected daae2d25a4779b272a66ddd01f5810bcee822b9e to before 6e501b3fd7a2e1c4372d72bc70717aaca2beb8a5Affected daae2d25a4779b272a66ddd01f5810bcee822b9e to before 902cc2507091a81643502d8ceb0e2f105e902518Affected daae2d25a4779b272a66ddd01f5810bcee822b9e to before b0637f4bd426925f5c3a15e8f8e36190fe06bac5Affected daae2d25a4779b272a66ddd01f5810bcee822b9e to before 6cf0981c2233f97d56938d9d61845383d6eb227cAffected
LinuxLinux	4.14Affected before 4.14Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

daae2d25a4779b272a66ddd01f5810bcee822b9e to before bdb2113dd8f17a3cc84a2b4be4968a849f69ec72Affected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before efd50c65fd1cdef63eb58825f3fe72496443764cAffected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before 8581ec1feb895ff596fe3d326d9ba320083290aaAffected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before 03f51c72997559e73b327608f0cccfded715c9a0Affected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before 6e501b3fd7a2e1c4372d72bc70717aaca2beb8a5Affected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before 902cc2507091a81643502d8ceb0e2f105e902518Affected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before b0637f4bd426925f5c3a15e8f8e36190fe06bac5Affected
daae2d25a4779b272a66ddd01f5810bcee822b9e to before 6cf0981c2233f97d56938d9d61845383d6eb227cAffected

LinuxLinux

4.14Affected
before 4.14Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.