Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48896
HistoryAug 21, 2024 - 6:10 a.m.

CVE-2022-48896 ixgbe: fix pci device refcount leak

2024-08-2106:10:28
Linux
github.com
2
linux kernel
cve-2022-48896
ixgbe
pci device
refcount
vulnerability fix

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

ixgbe: fix pci device refcount leak

As the comment of pci_get_domain_bus_and_slot() says, it
returns a PCI device with refcount incremented, when finish
using it, the caller must decrement the reference count by
calling pci_dev_put().

In ixgbe_get_first_secondary_devfn() and ixgbe_x550em_a_has_mii(),
pci_dev_put() is called to avoid leak.

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial