{"id":"CVE-2022-50520","state":"PUBLISHED","title":"drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()\n\nAs comment of pci_get_class() says, it returns a pci_device with its\nrefcount increased and decreased the refcount for the input parameter\n@from if it is not NULL.\n\nIf we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we\nneed to call pci_dev_put() to decrease the refcount. Add the missing\npci_dev_put() to avoid refcount leak.","publishedAt":"2025-10-07T15:19:14.528Z","updatedAt":"2026-05-23T15:24:39.058Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"6f28c7f67af4ef9bca580ab67ae2d4511797af56","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"e738f82e5b1311e8fb3d1409491a6fcce6418fbe","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"1079df6acf56f99d86b0081a38c84701412cc90e","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"470a77989037c3ab2b08bf2d026d2c0ddc35ff5b","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"88c6e0995c04b170563b5c894c50a3b2152e18c2","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"b9decada8749b606fd8b4f04a3d6c74f7983d7bc","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"a6cffe54064a5f6c2162a85af3c16c6b453eac4e","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"725a521a18734f65de05b8d353b5bd0d3ca4c37a","versionType":"git"},{"version":"61ebf0a926149cc161131470cf848cb70b3d6fe6","status":"affected","versionType":"git"},{"version":"0a1d9a860832a5ca43114cdebf0e8650463cc1f0","status":"affected","versionType":"git"},{"version":"5f54f145719f453dccc73304cd427096bf7b806c","status":"affected","versionType":"git"},{"version":"063ab9cb6308a0806d623c8d6dda5cb2b3b87fce","status":"affected","versionType":"git"},{"version":"3.2.29","status":"affected","lessThan":"3.3","versionType":"semver"},{"version":"3.4.12","status":"affected","lessThan":"3.5","versionType":"semver"},{"version":"3.5.5","status":"affected","lessThan":"3.6","versionType":"semver"},{"version":"3.2.60","status":"affected","lessThan":"3.3","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/radeon/radeon_bios.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.6","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.6","versionType":"semver"},{"version":"4.9.337","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.303","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.270","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/radeon/radeon_bios.c"]}],"references":["https://git.kernel.org/stable/c/6f28c7f67af4ef9bca580ab67ae2d4511797af56","https://git.kernel.org/stable/c/e738f82e5b1311e8fb3d1409491a6fcce6418fbe","https://git.kernel.org/stable/c/1079df6acf56f99d86b0081a38c84701412cc90e","https://git.kernel.org/stable/c/470a77989037c3ab2b08bf2d026d2c0ddc35ff5b","https://git.kernel.org/stable/c/3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4","https://git.kernel.org/stable/c/88c6e0995c04b170563b5c894c50a3b2152e18c2","https://git.kernel.org/stable/c/b9decada8749b606fd8b4f04a3d6c74f7983d7bc","https://git.kernel.org/stable/c/a6cffe54064a5f6c2162a85af3c16c6b453eac4e","https://git.kernel.org/stable/c/725a521a18734f65de05b8d353b5bd0d3ca4c37a"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50520.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50520","state":"PUBLISHED","datePublished":"2025-10-07T15:19:14.528Z","dateUpdated":"2026-05-23T15:24:39.058Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-10-07T15:15:38.663Z"},"containers":{"cna":{"title":"drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()\n\nAs comment of pci_get_class() says, it returns a pci_device with its\nrefcount increased and decreased the refcount for the input parameter\n@from if it is not NULL.\n\nIf we break the loop in radeon_atrm_get_bios() with 'pdev' not NULL, we\nneed to call pci_dev_put() to decrease the refcount. Add the missing\npci_dev_put() to avoid refcount leak."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"6f28c7f67af4ef9bca580ab67ae2d4511797af56","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"e738f82e5b1311e8fb3d1409491a6fcce6418fbe","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"1079df6acf56f99d86b0081a38c84701412cc90e","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"470a77989037c3ab2b08bf2d026d2c0ddc35ff5b","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"88c6e0995c04b170563b5c894c50a3b2152e18c2","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"b9decada8749b606fd8b4f04a3d6c74f7983d7bc","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"a6cffe54064a5f6c2162a85af3c16c6b453eac4e","versionType":"git"},{"version":"c61e2775873f603148e8e998a938721b7d222d24","status":"affected","lessThan":"725a521a18734f65de05b8d353b5bd0d3ca4c37a","versionType":"git"},{"version":"61ebf0a926149cc161131470cf848cb70b3d6fe6","status":"affected","versionType":"git"},{"version":"0a1d9a860832a5ca43114cdebf0e8650463cc1f0","status":"affected","versionType":"git"},{"version":"5f54f145719f453dccc73304cd427096bf7b806c","status":"affected","versionType":"git"},{"version":"063ab9cb6308a0806d623c8d6dda5cb2b3b87fce","status":"affected","versionType":"git"},{"version":"3.2.29","status":"affected","lessThan":"3.3","versionType":"semver"},{"version":"3.4.12","status":"affected","lessThan":"3.5","versionType":"semver"},{"version":"3.5.5","status":"affected","lessThan":"3.6","versionType":"semver"},{"version":"3.2.60","status":"affected","lessThan":"3.3","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/radeon/radeon_bios.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.6","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.6","versionType":"semver"},{"version":"4.9.337","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.303","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.270","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/gpu/drm/radeon/radeon_bios.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/6f28c7f67af4ef9bca580ab67ae2d4511797af56"},{"url":"https://git.kernel.org/stable/c/e738f82e5b1311e8fb3d1409491a6fcce6418fbe"},{"url":"https://git.kernel.org/stable/c/1079df6acf56f99d86b0081a38c84701412cc90e"},{"url":"https://git.kernel.org/stable/c/470a77989037c3ab2b08bf2d026d2c0ddc35ff5b"},{"url":"https://git.kernel.org/stable/c/3991d98a8a07b71c02f3a39f77d6d9a7f575a5c4"},{"url":"https://git.kernel.org/stable/c/88c6e0995c04b170563b5c894c50a3b2152e18c2"},{"url":"https://git.kernel.org/stable/c/b9decada8749b606fd8b4f04a3d6c74f7983d7bc"},{"url":"https://git.kernel.org/stable/c/a6cffe54064a5f6c2162a85af3c16c6b453eac4e"},{"url":"https://git.kernel.org/stable/c/725a521a18734f65de05b8d353b5bd0d3ca4c37a"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T15:24:39.058Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"4.9.337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"4.14.303"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"4.19.270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"5.4.229"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"5.10.163"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"5.15.86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"6.0.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"6.1.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"6.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.60"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}