In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Fix pci device refcount leak in ppr_notifier()

As comment of pci_get_domain_bus_and_slot() says, it returns
a pci device with refcount increment, when finish using it,
the caller must decrement the reference count by calling
pci_dev_put(). So call it before returning from ppr_notifier()
to avoid refcount leak.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00036.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-55649 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in ppr_notifier() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it before returning from ppr_notifier() to avoid refcount leak.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/03f51c72997559e73b327608f0cccfded715c9a0 cve-icon cve-icon
https://git.kernel.org/stable/c/6cf0981c2233f97d56938d9d61845383d6eb227c cve-icon cve-icon
https://git.kernel.org/stable/c/6e501b3fd7a2e1c4372d72bc70717aaca2beb8a5 cve-icon cve-icon
https://git.kernel.org/stable/c/8581ec1feb895ff596fe3d326d9ba320083290aa cve-icon cve-icon
https://git.kernel.org/stable/c/902cc2507091a81643502d8ceb0e2f105e902518 cve-icon cve-icon
https://git.kernel.org/stable/c/b0637f4bd426925f5c3a15e8f8e36190fe06bac5 cve-icon cve-icon
https://git.kernel.org/stable/c/bdb2113dd8f17a3cc84a2b4be4968a849f69ec72 cve-icon cve-icon
https://git.kernel.org/stable/c/efd50c65fd1cdef63eb58825f3fe72496443764c cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100422-CVE-2022-50505-b427@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50505 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50505 cve-icon
History

Mon, 06 Oct 2025 22:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 06 Oct 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 04 Oct 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in ppr_notifier() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). So call it before returning from ppr_notifier() to avoid refcount leak.
Title iommu/amd: Fix pci device refcount leak in ppr_notifier()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-04T15:43:54.265Z

Reserved: 2025-10-04T15:39:19.465Z

Link: CVE-2022-50505

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-04T16:15:47.730

Modified: 2025-10-06T14:56:21.733

Link: CVE-2022-50505

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-04T00:00:00Z

Links: CVE-2022-50505 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-06T14:41:14Z

Weaknesses

No weakness.