In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() pci_get_device() will increase the reference count for the returned 'dev'. We need to call pci_dev_put() to decrease the reference count. Since 'dev' is only used in pci_read_config_dword(), let's add pci_dev_put() right after it.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/1ff9dd6e7071a561f803135c1d684b13c7a7d01d cve-icon cve-icon
https://git.kernel.org/stable/c/3485f197518061371568f842405159aa9e4df551 cve-icon cve-icon
https://git.kernel.org/stable/c/48f32b9a74e2ac8e854bb87bfefdbc745125a123 cve-icon cve-icon
https://git.kernel.org/stable/c/5a96c10a56037db006ba6769307a9731cf6073be cve-icon cve-icon
https://git.kernel.org/stable/c/bd66877c0b3b42eed0ecee0bd2a2a505c1e54177 cve-icon cve-icon
https://git.kernel.org/stable/c/c0539d5d474ee6fa4ebc41f927a0f98f81244f25 cve-icon cve-icon
https://git.kernel.org/stable/c/e293263248f25c6b8aa1caf7c1103d40aa03311e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091552-CVE-2022-50318-6f5e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50318 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50318 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Tue, 16 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 15 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() pci_get_device() will increase the reference count for the returned 'dev'. We need to call pci_dev_put() to decrease the reference count. Since 'dev' is only used in pci_read_config_dword(), let's add pci_dev_put() right after it.
Title perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-15T14:48:51.035Z

Updated: 2025-09-15T14:48:51.035Z

Reserved: 2025-09-15T14:18:36.814Z

Link: CVE-2022-50318

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-15T15:15:43.750

Modified: 2025-09-15T15:22:27.090

Link: CVE-2022-50318

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2022-50318 - Bugzilla