CVE-2022-50868
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-12-30

Last updated on: 2025-12-31

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device refcount leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() for the normal and error path.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-30
Last Modified
2025-12-31
Generated
2026-05-07
AI Q&A
2025-12-30
EPSS Evaluated
2026-05-05
NVD
CVE-2022-50868
EUVD
EUVD-2022-55830
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability involves a reference count leak in the Linux kernel's AMD hardware random number generator (hwrng) driver related to PCI devices. Specifically, the function for_each_pci_dev() uses pci_get_device(), which increases the reference count of a pci_dev object. If the loop is broken early and the pci_dev pointer is not NULL, pci_dev_put() must be called to decrease the reference count. The vulnerability is due to missing calls to pci_dev_put() in both normal and error paths, causing a reference count leak.


How can this vulnerability impact me? :

The impact of this vulnerability is a resource leak in the Linux kernel, where PCI device reference counts are not properly decremented. This can lead to increased memory usage or resource exhaustion over time, potentially causing system instability or degraded performance.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart