CVE-2022-50718
published 2025-12-24CVE-2022-50718: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pci_get_domain_bus_and_slot() says…
PriorityP420low5.5
EPSS
0.21%
11.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put().
So before returning from amdgpu_device_resume|suspend_display_audio(),
pci_dev_put() is called to avoid refcount leak.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3f12acc8d6d4b2e62fab8f652d7075a859d80b42 < 3725a8f26bdbc38dfdf545836117f1e069277c91 | 3725a8f26bdbc38dfdf545836117f1e069277c91 |
| linux | linux | >= 3f12acc8d6d4b2e62fab8f652d7075a859d80b42 < 02105f0b3021ee5853b2fa50853c42f35fc01cfd | 02105f0b3021ee5853b2fa50853c42f35fc01cfd |
| linux | linux | >= 3f12acc8d6d4b2e62fab8f652d7075a859d80b42 < f13661b72a61708cecb06562f8acff068a4f31f7 | f13661b72a61708cecb06562f8acff068a4f31f7 |
| linux | linux | >= 3f12acc8d6d4b2e62fab8f652d7075a859d80b42 < d7352b410471cbebf6350b2990bae82bb0d59a76 | d7352b410471cbebf6350b2990bae82bb0d59a76 |
| linux | linux | >= 3f12acc8d6d4b2e62fab8f652d7075a859d80b42 < b85e285e3d6352b02947fc1b72303673dfacb0aa | b85e285e3d6352b02947fc1b72303673dfacb0aa |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.8.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
drm/amdgpu: fix pci device refcount leak
osv·2025-12-24
CVE-2022-50718 drm/amdgpu: fix pci device refcount leak
drm/amdgpu: fix pci device refcount leak
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put().
So before returning from amdgpu_device_resume|suspend_display_audio(),
pci_dev_put() is called to avoid refcount leak.
GHSA
GHSA-7848-864h-rr9q: In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_sl
ghsa_unreviewed·2025-12-24
CVE-2022-50718 GHSA-7848-864h-rr9q: In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_sl
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put().
So before returning from amdgpu_device_resume|suspend_display_audio(),
pci_dev_put() is called to avoid refcount leak.
OSV
CVE-2022-50718: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pci_get_domain_bus_and_slot
osv·2025-12-24
CVE-2022-50718 CVE-2022-50718: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pci_get_domain_bus_and_slot
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So before returning from amdgpu_device_resume|suspend_display_audio(), pci_dev_put() is called to avoid refcount leak.
Red Hat
kernel: Linux kernel: Denial of Service due to PCI device reference count leak
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2022-50718 [LOW] CWE-772 kernel: Linux kernel: Denial of Service due to PCI device reference count leak
kernel: Linux kernel: Denial of Service due to PCI device reference count leak
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put().
So before returning from amdgpu_device_resume|suspend_display_audio(),
pci_dev_put() is called to avoid refcount leak.
A flaw was found in the Linux kernel. A local low-privileged user could exploit a reference count leak in the `drm/amdgpu` component. This vulnerability, related to how PCI (Peripheral Component Interconnect) devices are managed, could lead to a Denial of Service (DoS) by exhausting system resourc
Debian
CVE-2022-50718: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
vendor_debian·2022
CVE-2022-50718 CVE-2022-50718: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So before returning from amdgpu_device_resume|suspend_display_audio(), pci_dev_put() is called to avoid refcount leak.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50718 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50718 CVE-2022-50718 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50718 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put().
So before returning from amdgpu_device_resume|suspend_display_audio(),
pci_dev_put() is called to avoid refcount leak.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 7.5
Exploitation Probability (EPSS) N/A
Affected p
Bugzilla
CVE-2022-50718 kernel: Linux kernel: Denial of Service due to PCI device reference count leak
bugzilla·2025-12-24
CVE-2022-50718 [LOW] CVE-2022-50718 kernel: Linux kernel: Denial of Service due to PCI device reference count leak
CVE-2022-50718 kernel: Linux kernel: Denial of Service due to PCI device reference count leak
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix pci device refcount leak
As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put().
So before returning from amdgpu_device_resume|suspend_display_audio(),
pci_dev_put() is called to avoid refcount leak.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2022-50718-a890@gregkh/T
https://git.kernel.org/stable/c/02105f0b3021ee5853b2fa50853c42f35fc01cfdhttps://git.kernel.org/stable/c/3725a8f26bdbc38dfdf545836117f1e069277c91https://git.kernel.org/stable/c/b85e285e3d6352b02947fc1b72303673dfacb0aahttps://git.kernel.org/stable/c/d7352b410471cbebf6350b2990bae82bb0d59a76https://git.kernel.org/stable/c/f13661b72a61708cecb06562f8acff068a4f31f7
2025-12-24
Published