PT-2024-11838 · Linux+4 · Linux Kernel+4
Xiongfeng Wang
·
Published
2022-11-30
·
Updated
2025-09-29
·
CVE-2022-48973
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a PCI device reference count leak in the Linux kernel's gpio component, specifically in the amd8111 driver. The problem arises from the incorrect handling of errors in the
ioport unmap() and amd gpio exit() functions in drivers/gpio/gpio-amd8111.c. This can potentially allow an attacker to cause a denial of service. The vulnerability is resolved by adding a missing pci dev put() call after the 'out' label and in the amd gpio exit() function to properly decrease the reference count.Recommendations
To resolve the issue, apply the fix that adds the missing
pci dev put() call after the 'out' label and in the amd gpio exit() function. As a temporary workaround, consider restricting access to the vulnerable amd8111 driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse