Reference Count Leak in Intel Uncore Module of Linux Kernel

CVE-2022-50318

What is CVE-2022-50318?

In the Intel uncore module of the Linux kernel, a vulnerability exists that allows a reference count leak due to improper handling of device references in the pci_get_device() function. Specifically, the reference counter is not decremented after usage, which could lead to resource management issues. To mitigate this vulnerability, it is necessary to add a call to pci_dev_put() immediately after pci_read_config_dword() to ensure the reference count is correctly managed.

References