In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device() will increase the reference count for the returned pci_dev. We need to use pci_dev_put() to decrease the reference count before amd_probe() returns. There is no problem for the 'smbus_dev == NULL' branch because pci_dev_put() can also handle the NULL input parameter case.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/222cfa0118aa68687ace74aab8fdf77ce8fbd7e6 cve-icon cve-icon
https://git.kernel.org/stable/c/27f712cd47d65e14cd52cc32a23d42aeef583d5d cve-icon cve-icon
https://git.kernel.org/stable/c/35bca18092685b488003509fef7055aa2d4f2ebc cve-icon cve-icon
https://git.kernel.org/stable/c/4423866d31a06a810db22062ed13389416a66b22 cve-icon cve-icon
https://git.kernel.org/stable/c/5dbd6378dbf96787d6dbcca44156c511ae085ea3 cve-icon cve-icon
https://git.kernel.org/stable/c/7570e5b5419ffd34b6dc45a88c51e113a9a187e3 cve-icon cve-icon
https://git.kernel.org/stable/c/a99a547658e5d451f01ed307426286716b6f01bf cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025050121-CVE-2022-49787-7fb0@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49787 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49787 cve-icon
History

Thu, 19 Jun 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Fri, 02 May 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Thu, 01 May 2025 14:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device() will increase the reference count for the returned pci_dev. We need to use pci_dev_put() to decrease the reference count before amd_probe() returns. There is no problem for the 'smbus_dev == NULL' branch because pci_dev_put() can also handle the NULL input parameter case.
Title mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T08:45:21.859Z

Reserved: 2025-05-01T14:05:17.223Z

Link: CVE-2022-49787

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-01T15:16:01.920

Modified: 2025-05-02T13:53:20.943

Link: CVE-2022-49787

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-01T00:00:00Z

Links: CVE-2022-49787 - Bugzilla