NetSight
IP …
medium5.5

CVE-2022-50520

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_cl…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2.29 before 3.3
from 3.2.60 before 3.3
from 3.4.12 before 3.5
from 3.5.5 before 3.6
from 3.6.1 before 4.9.337
from 4.10 before 4.14.303

References