CVE-2022-49002

Source
https://cve.org/CVERecord?id=CVE-2022-49002
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49002.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49002
Downstream
Related
Published
2024-10-21T20:06:16.093Z
Modified
2026-05-18T05:55:49.772577690Z
Summary
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
Details

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix PCI device refcount leak in dmardevscope_init()

foreachpcidev() is implemented by pcigetdevice(). The comment of pcigetdevice() says that it will increase the reference count for the returned pcidev and also decrease the reference count for the input pci_dev @from if it is not NULL.

If we break foreachpcidev() loop with pdev not NULL, we need to call pcidevput() to decrease the reference count. Add the missing pcidev_put() for the error path to avoid reference count leak.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49002.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2e45528930388658603ea24d49cf52867b928d3e
Fixed
d47bc9d7bcdbb9adc9703513d964b514fee5b0bf
Fixed
71c4a621985fc051ab86d3a86c749069a993fcb2
Fixed
876d7bfb89273997056220029ff12b1c2cc4691d
Fixed
cbdd83bd2fd67142b03ce9dbdd1eab322ff7321f
Fixed
a5c65cd56aed027f8a97fda8b691caaeb66d115e
Fixed
bdb613ef179ad4bb9d56a2533e9b30e434f1dfb7
Fixed
2a8f7b90681472948de172dbbf5a54cd342870aa
Fixed
4bedbbd782ebbe7287231fea862c158d4f08a9e3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49002.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.15.0
Fixed
4.9.335
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.301
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.268
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.226
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.158
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.82
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.12

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49002.json"