CVE-2022-49000
published 2024-10-21CVE-2022-49000: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() for_each_pci_dev() is…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
for_each_pci_dev() is implemented by pci_get_device(). The comment of
pci_get_device() says that it will increase the reference count for the
returned pci_dev and also decrease the reference count for the input
pci_dev @from if it is not NULL.
If we break for_each_pci_dev() loop with pdev not NULL, we need to call
pci_dev_put() to decrease the reference count. Add the missing
pci_dev_put() before 'return true' to avoid reference count leak.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.12-1 (bookworm) | linux 6.0.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 89a6079df791aeace2044ea93be1b397195824ec < 10ed7655a17f6a3eaecd1293830488259ccd5723 | 10ed7655a17f6a3eaecd1293830488259ccd5723 |
| linux | linux | >= 89a6079df791aeace2044ea93be1b397195824ec < b6eea8b2e858a20ad58ac62dc2de90fea2413f94 | b6eea8b2e858a20ad58ac62dc2de90fea2413f94 |
| linux | linux | >= 89a6079df791aeace2044ea93be1b397195824ec < 17f67414718e6aba123335a33b7d15aa594fff34 | 17f67414718e6aba123335a33b7d15aa594fff34 |
| linux | linux | >= 89a6079df791aeace2044ea93be1b397195824ec < afca9e19cc720bfafc75dc5ce429c185ca93f31d | afca9e19cc720bfafc75dc5ce429c185ca93f31d |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 5.0 < 5.10.158 | 5.10.158 |
| linux | linux_kernel | >= 5.11 < 5.15.82 | 5.15.82 |
| linux | linux_kernel | >= 5.16 < 6.0.12 | 6.0.12 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
vendor_redhat·2024-10-21·CVSS 5.5
CVE-2022-49000 [MEDIUM] CWE-401 kernel: iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
kernel: iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
for_each_pci_dev() is implemented by pci_get_device(). The comment of
pci_get_device() says that it will increase the reference count for the
returned pci_dev and also decrease the reference count for the input
pci_dev @from if it is not NULL.
If we break for_each_pci_dev() loop with pdev not NULL, we need to call
pci_dev_put() to decrease the reference count. Add the missing
pci_dev_put() before 'return true' to avoid reference count leak.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (R
Debian
CVE-2022-49000: linux - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d:...
vendor_debian·2022·CVSS 5.5
CVE-2022-49000 [MEDIUM] CVE-2022-49000: linux - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d:...
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() before 'return true' to avoid reference count leak.
Scope: local
bookworm: resolved (fixed in 6.0.12-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.12-1)
sid: resolved (fixed in 6.0.12-1)
trixie: resolved (fixed in 6.0.12-1)
OSV
CVE-2022-49000: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() for_each_pci_dev()
osv·2024-10-21·CVSS 5.5
CVE-2022-49000 [MEDIUM] CVE-2022-49000: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() for_each_pci_dev()
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() before 'return true' to avoid reference count leak.
GHSA
GHSA-q6cx-8jm9-6wv4: In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
for_each_pci_dev(
ghsa_unreviewed·2024-10-21
CVE-2022-49000 [MEDIUM] GHSA-q6cx-8jm9-6wv4: In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
for_each_pci_dev(
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
for_each_pci_dev() is implemented by pci_get_device(). The comment of
pci_get_device() says that it will increase the reference count for the
returned pci_dev and also decrease the reference count for the input
pci_dev @from if it is not NULL.
If we break for_each_pci_dev() loop with pdev not NULL, we need to call
pci_dev_put() to decrease the reference count. Add the missing
pci_dev_put() before 'return true' to avoid reference count leak.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-21
Published