In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pcigetdevwrapper() As the comment of pcigetdomainbusandslot() says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pcidevget() in pcigetdev_wrapper(), and the PCI device needs to be put in the error path.