CVE-2022-50520: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.

Affected products

• Linux Linux Kernel: from 3.2.29, before 3.3 (fixed in 3.3); from 3.2.60, before 3.3 (fixed in 3.3); from 3.4.12, before 3.5 (fixed in 3.5); from 3.5.5, before 3.6 (fixed in 3.6); from 3.6.1, before 4.9.337 (fixed in 4.9.337); from 4.10, before 4.14.303 (fixed in 4.14.303); …

Published 2025-10-07. Last modified 2026-06-17.