Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() pci_get_device() will increase the reference count for the returned 'dev'. We need to call pci_dev_put() to decrease the reference count. Since 'dev' is only used in pci_read_config_dword(), let's add pci_dev_put() right after it.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.19.189, < 4.19.270 |
References
- https://git.kernel.org/stable/c/1ff9dd6e7071a561f803135c1d684b13c7a7d01dPatch
- https://git.kernel.org/stable/c/3485f197518061371568f842405159aa9e4df551Patch
- https://git.kernel.org/stable/c/48f32b9a74e2ac8e854bb87bfefdbc745125a123Patch
- https://git.kernel.org/stable/c/5a96c10a56037db006ba6769307a9731cf6073bePatch
- https://git.kernel.org/stable/c/bd66877c0b3b42eed0ecee0bd2a2a505c1e54177Patch
- https://git.kernel.org/stable/c/c0539d5d474ee6fa4ebc41f927a0f98f81244f25Patch
- https://git.kernel.org/stable/c/e293263248f25c6b8aa1caf7c1103d40aa03311ePatch
FAQ
What is CVE-2022-50318?
CVE-2022-50318 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() pci_get_device() will increase the reference count for t...
How severe is CVE-2022-50318?
CVE-2022-50318 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50318?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.