PT-2025-18504
CVE-2022-49787
·
Published
2022-11-16
·
Updated
2026-07-28
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak issue has been identified in the Linux kernel, specifically in the sdhci-pci component. The problem arises from a missing
pci dev put() call, which is necessary to decrease the reference count for the pci dev returned by pci get device(). This issue is resolved by ensuring that pci dev put() is called before amd probe() returns, handling the case where smbus dev is NULL.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾