CVE-2022-48896: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pci_get_domain_bus_and_slot() says, it returns a PCI device with refcount incremented, when finish using it, the caller must decrement the reference count by calling pci_dev_put(). In ixgbe_get_first_secondary_devfn() and ixgbe_x550em_a_has_mii(), pci_dev_put() is called to avoid leak.

Affected products

• Linux Linux Kernel: from 5.0, before 5.4.229 (fixed in 5.4.229); from 5.5, before 5.10.164 (fixed in 5.10.164); from 5.11, before 5.15.89 (fixed in 5.15.89); from 5.16, before 6.1.7 (fixed in 6.1.7); version 6.2 only

Published 2024-08-21. Last modified 2026-06-17.