drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.30 % · percentile 23 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in amdgpu_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.
References
- https://git.kernel.org/stable/c/6611feef35c0c8c4d297b28a7fc6ab3a2c47eca7
- https://git.kernel.org/stable/c/da7c78ea9e62bb65273d3ff19a3866ec205bfe18
- https://git.kernel.org/stable/c/3360125d721c91d697c71201f18f042ff743e936
- https://git.kernel.org/stable/c/981024abf5fe605c94d4f906f65d1b3408d628be
- https://git.kernel.org/stable/c/7c1ddf7c664b5bc91f14b1bdeaa45520ef1760e4
- https://git.kernel.org/stable/c/8f2d2badf8ca5e7e7c30d88840b695c8af7286f3
- https://git.kernel.org/stable/c/9d4057d0452243917e12eb19f1599c96f2f05b14
- https://git.kernel.org/stable/c/a8b54ad7106c0604c4adc4933138b3557739bce0
- https://git.kernel.org/stable/c/ca54639c7752edf1304d92ff4d0c049d4efc9ba0
European references
- ENISA EUVD · EUVD-2022-55801
- GCVE · GCVE-0-2022-50760
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 6611feef35c0c8c4d297b28a7fc6ab3a2c47eca7 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < da7c78ea9e62bb65273d3ff19a3866ec205bfe18 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 3360125d721c91d697c71201f18f042ff743e936 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 981024abf5fe605c94d4f906f65d1b3408d628be ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 7c1ddf7c664b5bc91f14b1bdeaa45520ef1760e4 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 8f2d2badf8ca5e7e7c30d88840b695c8af7286f3 |
| Linux · Linux | affected 4.2 ; unaffected 0 < 4.2 ; unaffected 4.9.337 ≤ 4.9.* ; unaffected 4.14.303 ≤ 4.14.* ; unaffected 4.19.270 ≤ 4.19.* ; unaffected 5.4.229 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |