CVE-2022-50760

drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()

State: Published
Severity: Not scored
Published: Dec 24, 2025
Updated: May 11, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()

As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL.

If we break the loop in amdgpu_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6611feef35c0c8c4d297b28a7fc6ab3a2c47eca7Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before da7c78ea9e62bb65273d3ff19a3866ec205bfe18Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 3360125d721c91d697c71201f18f042ff743e936Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 981024abf5fe605c94d4f906f65d1b3408d628beAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 7c1ddf7c664b5bc91f14b1bdeaa45520ef1760e4Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 8f2d2badf8ca5e7e7c30d88840b695c8af7286f3Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 9d4057d0452243917e12eb19f1599c96f2f05b14Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before a8b54ad7106c0604c4adc4933138b3557739bce0Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before ca54639c7752edf1304d92ff4d0c049d4efc9ba0Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 6611feef35c0c8c4d297b28a7fc6ab3a2c47eca7Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before da7c78ea9e62bb65273d3ff19a3866ec205bfe18Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 3360125d721c91d697c71201f18f042ff743e936Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 981024abf5fe605c94d4f906f65d1b3408d628beAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 7c1ddf7c664b5bc91f14b1bdeaa45520ef1760e4Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 8f2d2badf8ca5e7e7c30d88840b695c8af7286f3Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 9d4057d0452243917e12eb19f1599c96f2f05b14Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before a8b54ad7106c0604c4adc4933138b3557739bce0Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before ca54639c7752edf1304d92ff4d0c049d4efc9ba0Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.