Strix
26.1K

CVE-2022-50645

UnknownEPSS 0.17%

Last modified

CVE-2022-50645 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI device needs to be put in the error path.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI device needs to be put in the error path.

Metrics

EPSS Probability
0.17%

6.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d4dc89d069aab9074e2493a4c2f3969a0a0b91c1, < e6e295a434d1c917a017980389aec88bf35cc81b; >= d4dc89d069aab9074e2493a4c2f3969a0a0b91c1, < 2db53c7059167b63cc790366ef1a9e286e71980b; >= d4dc89d069aab9074e2493a4c2f3969a0a0b91c1, < 3e255dc21031cc1f341584eb99a7f31598bf0be7; >= d4dc89d069aab9074e2493a4c2f3969a0a0b91c1, < 1adb2583cdbd75f379e3230a43a7412d373d499f; >= d4dc89d069aab9074e2493a4c2f3969a0a0b91c1, < f29c2f57cdf7a57223dcd9fbaa2261faab5234b2; >= d4dc89d069aab9074e2493a4c2f3969a0a0b91c1, < 9c8921555907f4d723f01ed2d859b66f2d14f08e
LinuxLinux5.1

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2022-50645?
In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI device needs to be put in the error path.
How severe is CVE-2022-50645?
Severity scoring for CVE-2022-50645 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2022-50645?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2022

View all 2022CVEs →

Are you affected by CVE-2022-50645?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST