CVE-2022-50520None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decrease…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL.
If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.
Linux >= c61e2775873f603148e8e998a938721b7d222d24 < 6f28c7f67af4ef9bca580ab67ae2d4511797af56Linux >= c61e2775873f603148e8e998a938721b7d222d24 < e738f82e5b1311e8fb3d1409491a6fcce6418fbeLinux >= c61e2775873f603148e8e998a938721b7d222d24 < 1079df6acf56f99d86b0081a38c84701412cc90eLinux >= c61e2775873f603148e8e998a938721b7d222d24 < 470a77989037c3ab2b08bf2d026d2c0ddc35ff5bLinux >= c61e2775873f603148e8e998a938721b7d222d24 < 3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4Linux >= c61e2775873f603148e8e998a938721b7d222d24 < 88c6e0995c04b170563b5c894c50a3b2152e18c2Linux >= c61e2775873f603148e8e998a938721b7d222d24 < b9decada8749b606fd8b4f04a3d6c74f7983d7bcLinux >= c61e2775873f603148e8e998a938721b7d222d24 < a6cffe54064a5f6c2162a85af3c16c6b453eac4eLinux >= c61e2775873f603148e8e998a938721b7d222d24 < 725a521a18734f65de05b8d353b5bd0d3ca4c37aLinux 61ebf0a926149cc161131470cf848cb70b3d6fe6Linux 0a1d9a860832a5ca43114cdebf0e8650463cc1f0Linux 5f54f145719f453dccc73304cd427096bf7b806cLinux 063ab9cb6308a0806d623c8d6dda5cb2b3b87fceLinux >= 3.2.29 < 3.3Linux >= 3.4.12 < 3.5Linux >= 3.5.5 < 3.6Linux >= 3.2.60 < 3.3Linux 3.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses