PT-2025-49625 · Linux+1 · Linux Kernel+1

Published 2025-12-09 · Updated 2025-12-22 · CVE-2022-50645

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak exists in the pci get dev wrapper() function within the EDAC/i10nm module of the Linux kernel. The issue stems from an unnecessary call to pci dev get() in pci get dev wrapper(), as the pci get domain bus and slot() function already increments the PCI device's reference count. This leads to a memory leak when the PCI device is released in the error path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50645

RHSA-2023:6583

RHSA-2023:7370

Affected Products

Linux Kernel

Red Hat

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50645.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50645 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50645 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50645 · Security Note
• https://ubuntu.com/security/CVE-2022-50645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50645 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50645 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50645 · Vendor Advisory
• https://git.kernel.org/stable/c/e6e295a434d1c917a017980389aec88bf35cc81b · Note
• https://git.kernel.org/stable/c/2db53c7059167b63cc790366ef1a9e286e71980b · Note
• https://git.kernel.org/stable/c/9c8921555907f4d723f01ed2d859b66f2d14f08e · Note
• https://twitter.com/CVEnew/status/2003198664240464377 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/1adb2583cdbd75f379e3230a43a7412d373d499f · Note
• https://git.kernel.org/stable/c/3e255dc21031cc1f341584eb99a7f31598bf0be7 · Note