CVE-2022-50337
published 2025-09-15CVE-2022-50337: In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0() calls…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
ocxl: fix pci device refcount leak when calling get_function_0()
get_function_0() calls pci_get_domain_bus_and_slot(), as comment
says, it returns a pci device with refcount increment, so after
using it, pci_dev_put() needs be called.
Get the device reference when get_function_0() is not called, so
pci_dev_put() can be called in the error path and callers
unconditionally. And add comment above get_dvsec_vendor0() to tell
callers to call pci_dev_put().
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 87db7579ebd5ded337056eb765542eb2608f16e3 < a40e1b0a922a53fa925ea8b296e3de30a31ed028 | a40e1b0a922a53fa925ea8b296e3de30a31ed028 |
| linux | linux | >= 87db7579ebd5ded337056eb765542eb2608f16e3 < 37a13b274e4513c757e50c002ddcbf4bc89adbb2 | 37a13b274e4513c757e50c002ddcbf4bc89adbb2 |
| linux | linux | >= 87db7579ebd5ded337056eb765542eb2608f16e3 < 9a1b3148975b71fdc194e62612478346bbe618cd | 9a1b3148975b71fdc194e62612478346bbe618cd |
| linux | linux | >= 87db7579ebd5ded337056eb765542eb2608f16e3 < 40ff4c2335a98f0ee96b099bfd70b8e6644f321f | 40ff4c2335a98f0ee96b099bfd70b8e6644f321f |
| linux | linux | >= 87db7579ebd5ded337056eb765542eb2608f16e3 < 27158c72678b39ee01cc01de1aba6b51c71abe2f | 27158c72678b39ee01cc01de1aba6b51c71abe2f |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 5.11 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.9 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ocxl: fix pci device refcount leak when calling get_function_0()
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2022-50337 [MEDIUM] CWE-772 kernel: ocxl: fix pci device refcount leak when calling get_function_0()
kernel: ocxl: fix pci device refcount leak when calling get_function_0()
In the Linux kernel, the following vulnerability has been resolved:
ocxl: fix pci device refcount leak when calling get_function_0()
get_function_0() calls pci_get_domain_bus_and_slot(), as comment
says, it returns a pci device with refcount increment, so after
using it, pci_dev_put() needs be called.
Get the device reference when get_function_0() is not called, so
pci_dev_put() can be called in the error path and callers
unconditionally. And add comment above get_dvsec_vendor0() to tell
callers to call pci_dev_put().
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-r
Debian
CVE-2022-50337: linux - In the Linux kernel, the following vulnerability has been resolved: ocxl: fix p...
vendor_debian·2022·CVSS 5.5
CVE-2022-50337 [MEDIUM] CVE-2022-50337: linux - In the Linux kernel, the following vulnerability has been resolved: ocxl: fix p...
In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0() calls pci_get_domain_bus_and_slot(), as comment says, it returns a pci device with refcount increment, so after using it, pci_dev_put() needs be called. Get the device reference when get_function_0() is not called, so pci_dev_put() can be called in the error path and callers unconditionally. And add comment above get_dvsec_vendor0() to tell callers to call pci_dev_put().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
GHSA
GHSA-p8q7-6g9r-q34g: In the Linux kernel, the following vulnerability has been resolved:
ocxl: fix pci device refcount leak when calling get_function_0()
get_function_0(
ghsa_unreviewed·2025-09-15
CVE-2022-50337 [MEDIUM] GHSA-p8q7-6g9r-q34g: In the Linux kernel, the following vulnerability has been resolved:
ocxl: fix pci device refcount leak when calling get_function_0()
get_function_0(
In the Linux kernel, the following vulnerability has been resolved:
ocxl: fix pci device refcount leak when calling get_function_0()
get_function_0() calls pci_get_domain_bus_and_slot(), as comment
says, it returns a pci device with refcount increment, so after
using it, pci_dev_put() needs be called.
Get the device reference when get_function_0() is not called, so
pci_dev_put() can be called in the error path and callers
unconditionally. And add comment above get_dvsec_vendor0() to tell
callers to call pci_dev_put().
OSV
CVE-2022-50337: In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0()
osv·2025-09-15·CVSS 5.5
CVE-2022-50337 [MEDIUM] CVE-2022-50337: In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0()
In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_function_0() calls pci_get_domain_bus_and_slot(), as comment says, it returns a pci device with refcount increment, so after using it, pci_dev_put() needs be called. Get the device reference when get_function_0() is not called, so pci_dev_put() can be called in the error path and callers unconditionally. And add comment above get_dvsec_vendor0() to tell callers to call pci_dev_put().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/27158c72678b39ee01cc01de1aba6b51c71abe2fhttps://git.kernel.org/stable/c/37a13b274e4513c757e50c002ddcbf4bc89adbb2https://git.kernel.org/stable/c/40ff4c2335a98f0ee96b099bfd70b8e6644f321fhttps://git.kernel.org/stable/c/9a1b3148975b71fdc194e62612478346bbe618cdhttps://git.kernel.org/stable/c/a40e1b0a922a53fa925ea8b296e3de30a31ed028
2025-09-15
Published