Strix
26.1K

CVE-2022-50576

UnknownEPSS 0.23%

Last modified

CVE-2022-50576 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pch_request_dma() As comment of pci_get_slot() says, it returns a pci_device with its refcount increased. The caller must decrement the reference count by calling pci_dev_put(). Since 'dma_dev' is only used to filter the channel in filter(), we can call pci_dev_put() before exiting from pch_request_dma(). EPSS estimates a 0.23% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pch_request_dma() As comment of pci_get_slot() says, it returns a pci_device with its refcount increased. The caller must decrement the reference count by calling pci_dev_put(). Since 'dma_dev' is only used to filter the channel in filter(), we can call pci_dev_put() before exiting from pch_request_dma(). Add the missing pci_dev_put() for the normal and error path.

Metrics

EPSS Probability
0.23%

13.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 90ff030ca10b69feeebda1427550ebf9ed2ad868; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 56e5a7c5ee3f0dc8978b5df2b1a98a1b060c5e2a; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < dfd15c5550b9190d5b0f9bcacb3e6436322f3854; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < d165388227aa7e46a9751b90bae6337b5335cdbb; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 07f4ca68b0f6bf84b6b391c14b59fd179fcde9c5; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 6f7d82380fbeaed3a940efc33c23f0c4bbd0fc02; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 4f5d28865c665c9064de631a518f9bc8099d9ce4; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 516614a371c26e3334625b4bca19a5362bf658d6; >= 3c6a483275f47a2ef7119309ad3d791c10cf30da, < 8be3a7bf773700534a6e8f87f6ed2ed111254be5
LinuxLinux2.6.38

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2022-50576?
In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pch_request_dma() As comment of pci_get_slot() says, it returns a pci_device with its refcount increased. The caller must decrement the reference count by calling pci_dev_put(). Since 'dma_dev' is only used to filter the channel in filter(), we can call pci_dev_put() before exiting from pch_request_dma(). Add the missing pci_dev_put() for the normal and error path.
How severe is CVE-2022-50576?
Severity scoring for CVE-2022-50576 is pending analysis. The EPSS model estimates a 0.23% probability of exploitation in the next 30 days.
How do I fix CVE-2022-50576?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2022

View all 2022CVEs →

Are you affected by CVE-2022-50576?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST