CVE-2022-50520
published 2025-10-07CVE-2022-50520: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
5.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
As comment of pci_get_class() says, it returns a pci_device with its
refcount increased and decreased the refcount for the input parameter
@from if it is not NULL.
If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we
need to call pci_dev_put() to decrease the refcount. Add the missing
pci_dev_put() to avoid refcount leak.
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 3.2.29 < 3.3 | 3.3 |
| linux | linux | >= 3.2.60 < 3.3 | 3.3 |
| linux | linux | >= 3.4.12 < 3.5 | 3.5 |
| linux | linux | >= 3.5.5 < 3.6 | 3.6 |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < 6f28c7f67af4ef9bca580ab67ae2d4511797af56 | 6f28c7f67af4ef9bca580ab67ae2d4511797af56 |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < e738f82e5b1311e8fb3d1409491a6fcce6418fbe | e738f82e5b1311e8fb3d1409491a6fcce6418fbe |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < 1079df6acf56f99d86b0081a38c84701412cc90e | 1079df6acf56f99d86b0081a38c84701412cc90e |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < 470a77989037c3ab2b08bf2d026d2c0ddc35ff5b | 470a77989037c3ab2b08bf2d026d2c0ddc35ff5b |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < 3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4 | 3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4 |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < 88c6e0995c04b170563b5c894c50a3b2152e18c2 | 88c6e0995c04b170563b5c894c50a3b2152e18c2 |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < b9decada8749b606fd8b4f04a3d6c74f7983d7bc | b9decada8749b606fd8b4f04a3d6c74f7983d7bc |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < a6cffe54064a5f6c2162a85af3c16c6b453eac4e | a6cffe54064a5f6c2162a85af3c16c6b453eac4e |
| linux | linux | >= c61e2775873f603148e8e998a938721b7d222d24 < 725a521a18734f65de05b8d353b5bd0d3ca4c37a | 725a521a18734f65de05b8d353b5bd0d3ca4c37a |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 3.2.29 < 3.3 | 3.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.1.1 radeon_atrm_get_bios reference count (WID-SEC-2025-2229)
vuldb·2026-04-19·CVSS 5.5
CVE-2022-50520 [MEDIUM] Linux Kernel up to 6.1.1 radeon_atrm_get_bios reference count (WID-SEC-2025-2229)
A vulnerability was found in Linux Kernel up to 6.1.1. It has been rated as critical. Affected is the function radeon_atrm_get_bios. The manipulation leads to improper update of reference count.
This vulnerability is referenced as CVE-2022-50520. The attack needs to be initiated within the local network. No exploit is available.
Upgrading the affected component is advised.
OSV
CVE-2022-50520: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of p
osv·2025-10-07·CVSS 5.5
CVE-2022-50520 [MEDIUM] CVE-2022-50520: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of p
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.
GHSA
GHSA-2hpp-r984-4f9g: In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
As comment of
ghsa_unreviewed·2025-10-07
CVE-2022-50520 [MEDIUM] GHSA-2hpp-r984-4f9g: In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
As comment of
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
As comment of pci_get_class() says, it returns a pci_device with its
refcount increased and decreased the refcount for the input parameter
@from if it is not NULL.
If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we
need to call pci_dev_put() to decrease the refcount. Add the missing
pci_dev_put() to avoid refcount leak.
Red Hat
kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
vendor_redhat·2025-10-07·CVSS 5.5
CVE-2022-50520 [MEDIUM] CWE-911 kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
kernel: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
As comment of pci_get_class() says, it returns a pci_device with its
refcount increased and decreased the refcount for the input parameter
@from if it is not NULL.
If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we
need to call pci_dev_put() to decrease the refcount. Add the missing
pci_dev_put() to avoid refcount leak.
A reference leak flaw was found in the Linux kernel's Radeon graphics driver in the BIOS retrieval logic.
A local user on systems with AMD Radeon graphics hardware can trigger this issue when the driver searches for ACPI firmware tables and exit
Debian
CVE-2022-50520: linux - In the Linux kernel, the following vulnerability has been resolved: drm/radeon:...
vendor_debian·2022·CVSS 5.5
CVE-2022-50520 [MEDIUM] CVE-2022-50520: linux - In the Linux kernel, the following vulnerability has been resolved: drm/radeon:...
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1079df6acf56f99d86b0081a38c84701412cc90ehttps://git.kernel.org/stable/c/3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4https://git.kernel.org/stable/c/470a77989037c3ab2b08bf2d026d2c0ddc35ff5bhttps://git.kernel.org/stable/c/6f28c7f67af4ef9bca580ab67ae2d4511797af56https://git.kernel.org/stable/c/725a521a18734f65de05b8d353b5bd0d3ca4c37ahttps://git.kernel.org/stable/c/88c6e0995c04b170563b5c894c50a3b2152e18c2https://git.kernel.org/stable/c/a6cffe54064a5f6c2162a85af3c16c6b453eac4ehttps://git.kernel.org/stable/c/b9decada8749b606fd8b4f04a3d6c74f7983d7bchttps://git.kernel.org/stable/c/e738f82e5b1311e8fb3d1409491a6fcce6418fbe
2025-10-07
Published