What’s Vulnerable › Vulnerabilities

CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pci_dev_get() in pci_get_dev_wrapper(), and the PCI device needs to be put in the error path.

Affected products

• Linux kernel: 5.1 — fixed in 6.2

How to fix

Upgrade to a fixed version: Linux kernel 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1adb2583cdbd75f379e3230a43a7412d373d499f
• https://git.kernel.org/stable/c/2db53c7059167b63cc790366ef1a9e286e71980b
• https://git.kernel.org/stable/c/3e255dc21031cc1f341584eb99a7f31598bf0be7
• https://git.kernel.org/stable/c/9c8921555907f4d723f01ed2d859b66f2d14f08e
• https://git.kernel.org/stable/c/e6e295a434d1c917a017980389aec88bf35cc81b
• https://git.kernel.org/stable/c/f29c2f57cdf7a57223dcd9fbaa2261faab5234b2

Get alerted when CVE-2022-50645 or the next vulnerability affects your stack