In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in ppr_notifier() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it before returning from ppr_notifier() to avoid refcount leak.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/03f51c72997559e73b327608f0cccfded715c9a0 cve-icon cve-icon
https://git.kernel.org/stable/c/6cf0981c2233f97d56938d9d61845383d6eb227c cve-icon cve-icon
https://git.kernel.org/stable/c/6e501b3fd7a2e1c4372d72bc70717aaca2beb8a5 cve-icon cve-icon
https://git.kernel.org/stable/c/8581ec1feb895ff596fe3d326d9ba320083290aa cve-icon cve-icon
https://git.kernel.org/stable/c/902cc2507091a81643502d8ceb0e2f105e902518 cve-icon cve-icon
https://git.kernel.org/stable/c/b0637f4bd426925f5c3a15e8f8e36190fe06bac5 cve-icon cve-icon
https://git.kernel.org/stable/c/bdb2113dd8f17a3cc84a2b4be4968a849f69ec72 cve-icon cve-icon
https://git.kernel.org/stable/c/efd50c65fd1cdef63eb58825f3fe72496443764c cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100422-CVE-2022-50505-b427@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50505 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50505 cve-icon
History

Mon, 06 Oct 2025 22:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 06 Oct 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 04 Oct 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in ppr_notifier() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it before returning from ppr_notifier() to avoid refcount leak.
Title iommu/amd: Fix pci device refcount leak in ppr_notifier()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-04T15:43:54.265Z

Reserved: 2025-10-04T15:39:19.465Z

Link: CVE-2022-50505

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-04T16:15:47.730

Modified: 2025-10-06T14:56:21.733

Link: CVE-2022-50505

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-04T00:00:00Z

Links: CVE-2022-50505 - Bugzilla