{"id":"CVE-2022-49787","state":"PUBLISHED","title":"mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()\n\npci_get_device() will increase the reference count for the returned\npci_dev. We need to use pci_dev_put() to decrease the reference count\nbefore amd_probe() returns. There is no problem for the 'smbus_dev ==\nNULL' branch because pci_dev_put() can also handle the NULL input\nparameter case.","publishedAt":"2025-05-01T14:09:19.731Z","updatedAt":"2026-05-11T19:06:46.516Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"7570e5b5419ffd34b6dc45a88c51e113a9a187e3","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"5dbd6378dbf96787d6dbcca44156c511ae085ea3","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"27f712cd47d65e14cd52cc32a23d42aeef583d5d","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"4423866d31a06a810db22062ed13389416a66b22","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"a99a547658e5d451f01ed307426286716b6f01bf","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"35bca18092685b488003509fef7055aa2d4f2ebc","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"222cfa0118aa68687ace74aab8fdf77ce8fbd7e6","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/sdhci-pci-core.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.4","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.4","versionType":"semver"},{"version":"4.14.300","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.267","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.225","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.156","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.80","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.10","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/sdhci-pci-core.c"]}],"references":["https://git.kernel.org/stable/c/7570e5b5419ffd34b6dc45a88c51e113a9a187e3","https://git.kernel.org/stable/c/5dbd6378dbf96787d6dbcca44156c511ae085ea3","https://git.kernel.org/stable/c/27f712cd47d65e14cd52cc32a23d42aeef583d5d","https://git.kernel.org/stable/c/4423866d31a06a810db22062ed13389416a66b22","https://git.kernel.org/stable/c/a99a547658e5d451f01ed307426286716b6f01bf","https://git.kernel.org/stable/c/35bca18092685b488003509fef7055aa2d4f2ebc","https://git.kernel.org/stable/c/222cfa0118aa68687ace74aab8fdf77ce8fbd7e6"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49787.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49787","state":"PUBLISHED","datePublished":"2025-05-01T14:09:19.731Z","dateUpdated":"2026-05-11T19:06:46.516Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-05-01T14:05:17.223Z"},"containers":{"cna":{"title":"mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()\n\npci_get_device() will increase the reference count for the returned\npci_dev. We need to use pci_dev_put() to decrease the reference count\nbefore amd_probe() returns. There is no problem for the 'smbus_dev ==\nNULL' branch because pci_dev_put() can also handle the NULL input\nparameter case."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"7570e5b5419ffd34b6dc45a88c51e113a9a187e3","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"5dbd6378dbf96787d6dbcca44156c511ae085ea3","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"27f712cd47d65e14cd52cc32a23d42aeef583d5d","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"4423866d31a06a810db22062ed13389416a66b22","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"a99a547658e5d451f01ed307426286716b6f01bf","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"35bca18092685b488003509fef7055aa2d4f2ebc","versionType":"git"},{"version":"659c9bc114a810b3a3c1e50585cc57f1312a6d60","status":"affected","lessThan":"222cfa0118aa68687ace74aab8fdf77ce8fbd7e6","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/sdhci-pci-core.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.4","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.4","versionType":"semver"},{"version":"4.14.300","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.267","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.225","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.156","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.80","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.10","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/sdhci-pci-core.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/7570e5b5419ffd34b6dc45a88c51e113a9a187e3"},{"url":"https://git.kernel.org/stable/c/5dbd6378dbf96787d6dbcca44156c511ae085ea3"},{"url":"https://git.kernel.org/stable/c/27f712cd47d65e14cd52cc32a23d42aeef583d5d"},{"url":"https://git.kernel.org/stable/c/4423866d31a06a810db22062ed13389416a66b22"},{"url":"https://git.kernel.org/stable/c/a99a547658e5d451f01ed307426286716b6f01bf"},{"url":"https://git.kernel.org/stable/c/35bca18092685b488003509fef7055aa2d4f2ebc"},{"url":"https://git.kernel.org/stable/c/222cfa0118aa68687ace74aab8fdf77ce8fbd7e6"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:06:46.516Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"4.14.300"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"4.19.267"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"5.4.225"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"5.10.156"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"5.15.80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"6.0.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4","versionEndExcluding":"6.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}