CVE-2022-48881
published 2024-08-21CVE-2022-48881: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot() takes…
PriorityP424high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.23%
13.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: Fix refcount leak in amd_pmc_probe
pci_get_domain_bus_and_slot() takes reference, the caller should release
the reference by calling pci_dev_put() after use. Call pci_dev_put() in
the error path to fix this.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.7-1 (bookworm) | linux 6.1.7-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3d7d407dfb05b257e15cb0c6b056428a4a8c2e5d < 3944162821295993ec89992dec98ab6be6306cc0 | 3944162821295993ec89992dec98ab6be6306cc0 |
| linux | linux | >= 3d7d407dfb05b257e15cb0c6b056428a4a8c2e5d < ccb32e2be14271a60e9ba89c6d5660cc9998773c | ccb32e2be14271a60e9ba89c6d5660cc9998773c |
| linux | linux_kernel | >= 0 < 6.1.7-1 | 6.1.7-1 |
| linux | linux_kernel | >= 0 < 6.1.7-1 | 6.1.7-1 |
| linux | linux_kernel | >= 0 < 6.1.7-1 | 6.1.7-1 |
| linux | linux_kernel | >= 5.18 < 6.1.7 | 6.1.7 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: platform/x86/amd: Fix refcount leak in amd_pmc_probe
vendor_redhat·2024-08-21·CVSS 7.1
CVE-2022-48881 [HIGH] CWE-401 kernel: platform/x86/amd: Fix refcount leak in amd_pmc_probe
kernel: platform/x86/amd: Fix refcount leak in amd_pmc_probe
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: Fix refcount leak in amd_pmc_probe
pci_get_domain_bus_and_slot() takes reference, the caller should release
the reference by calling pci_dev_put() after use. Call pci_dev_put() in
the error path to fix this.
A vulnerability was found in the amd_pmc_probe() function in the Linux kernel's AMD PMC driver, where a reference count leak can occur because the function does not properly release the reference count obtained by pci_get_domain_bus_and_slot(). Over time, this could lead to memory exhaustion.
Statement: Red Hat Enterprise Linux is not impacted by this CVE, as this vulnerability does not affect the specific versions or configurations of th
Debian
CVE-2022-48881: linux - In the Linux kernel, the following vulnerability has been resolved: platform/x8...
vendor_debian·2022·CVSS 7.1
CVE-2022-48881 [HIGH] CVE-2022-48881: linux - In the Linux kernel, the following vulnerability has been resolved: platform/x8...
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot() takes reference, the caller should release the reference by calling pci_dev_put() after use. Call pci_dev_put() in the error path to fix this.
Scope: local
bookworm: resolved (fixed in 6.1.7-1)
bullseye: resolved
forky: resolved (fixed in 6.1.7-1)
sid: resolved (fixed in 6.1.7-1)
trixie: resolved (fixed in 6.1.7-1)
GHSA
GHSA-8rqg-fx6m-3c97: In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: Fix refcount leak in amd_pmc_probe
pci_get_domain_bus_and_slot
ghsa_unreviewed·2024-08-21
CVE-2022-48881 [HIGH] GHSA-8rqg-fx6m-3c97: In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: Fix refcount leak in amd_pmc_probe
pci_get_domain_bus_and_slot
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd: Fix refcount leak in amd_pmc_probe
pci_get_domain_bus_and_slot() takes reference, the caller should release
the reference by calling pci_dev_put() after use. Call pci_dev_put() in
the error path to fix this.
OSV
CVE-2022-48881: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot()
osv·2024-08-21·CVSS 7.1
CVE-2022-48881 [HIGH] CVE-2022-48881: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot()
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot() takes reference, the caller should release the reference by calling pci_dev_put() after use. Call pci_dev_put() in the error path to fix this.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-21
Published