Reference Count Leak in Linux Kernel Affects Multiple Devices

CVE-2022-50615

What is CVE-2022-50615?

A vulnerability was identified in the Linux kernel that results in a reference count leak in the 'snr_uncore_mmio_map()' function. The issue arises when the 'pci_get_device()' function is called, which increments the reference count of the returned 'pci_dev'. However, the subsequent call to 'snr_uncore_get_mc_dev()' does not properly manage the reference count, leading to potential resource leaks. To mitigate this risk, it is necessary to implement the 'pci_dev_put()' function to decrement the reference count correctly. This vulnerability can affect system stability and resource management, emphasizing the need for timely updates and patches.

References