Back to CVE records
Not yet scoredPublished Dec 24, 2025

CVE-2022-50760drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() As comment of pci_get_class() says, it returns a pci_device with its refcount increased and decreased the refcount for the input parameter @from if it is not NULL. If we break the loop in amdgpu_atrm_get_bios() with 'pdev' not NULL, we need to call pci_dev_put() to decrease the refcount. Add the missing pci_dev_put() to avoid refcount leak.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 6611feef35c0c8c4d297b28a7fc6ab3a2c47eca7; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before da7c78ea9e62bb65273d3ff19a3866ec205bfe18; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 3360125d721c91d697c71201f18f042ff743e936; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 981024abf5fe605c94d4f906f65d1b3408d628be; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 7c1ddf7c664b5bc91f14b1bdeaa45520ef1760e4; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 8f2d2badf8ca5e7e7c30d88840b695c8af7286f3; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 9d4057d0452243917e12eb19f1599c96f2f05b14; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before a8b54ad7106c0604c4adc4933138b3557739bce0; and 1 more ranges
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.