Back
CVE-2022-49787
mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
Medium5.5EPSS 0.22%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device() will increase the reference count for the returned pci_dev. We need to use pci_dev_put() to decrease the reference count before amd_probe() returns. There is no problem for the 'smbus_dev == NULL' branch because pci_dev_put() can also handle the NULL input parameter case.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 88% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < 7570e5b5419ffd34b6dc45a88c51e113a9a187e3
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < 5dbd6378dbf96787d6dbcca44156c511ae085ea3
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < 27f712cd47d65e14cd52cc32a23d42aeef583d5d
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < 4423866d31a06a810db22062ed13389416a66b22
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < a99a547658e5d451f01ed307426286716b6f01bf
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < 35bca18092685b488003509fef7055aa2d4f2ebc
- affected 659c9bc114a810b3a3c1e50585cc57f1312a6d60 – < 222cfa0118aa68687ace74aab8fdf77ce8fbd7e6
- affected 4.4
- unaffected < 4.4
- unaffected 4.14.300 – ≤ 4.14.*
- unaffected 4.19.267 – ≤ 4.19.*
- unaffected 5.4.225 – ≤ 5.4.*
- unaffected 5.10.156 – ≤ 5.10.*
- unaffected 5.15.80 – ≤ 5.15.*
- unaffected 6.0.10 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References (7)
- https://git.kernel.org/stable/c/7570e5b5419ffd34b6dc45a88c51e113a9a187e3 (opens in a new tab)
- https://git.kernel.org/stable/c/5dbd6378dbf96787d6dbcca44156c511ae085ea3 (opens in a new tab)
- https://git.kernel.org/stable/c/27f712cd47d65e14cd52cc32a23d42aeef583d5d (opens in a new tab)
- https://git.kernel.org/stable/c/4423866d31a06a810db22062ed13389416a66b22 (opens in a new tab)
- https://git.kernel.org/stable/c/a99a547658e5d451f01ed307426286716b6f01bf (opens in a new tab)
- https://git.kernel.org/stable/c/35bca18092685b488003509fef7055aa2d4f2ebc (opens in a new tab)
- https://git.kernel.org/stable/c/222cfa0118aa68687ace74aab8fdf77ce8fbd7e6 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49787)Record last updated .