HomeDefectsLIN1022-19802
Fixed

LIN1022-19802 : Security Advisory - linux - CVE-2022-50659

Created: Dec 10, 2025    Updated: Dec 11, 2025
Resolved Date: Dec 10, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.5
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]hwrng: geode - Fix PCI device refcount leak[EOL][EOL]for_each_pci_dev() is implemented by pci_get_device(). The comment of[EOL]pci_get_device() says that it will increase the reference count for the[EOL]returned pci_dev and also decrease the reference count for the input[EOL]pci_dev @from if it is not NULL.[EOL][EOL]If we break for_each_pci_dev() loop with pdev not NULL, we need to call[EOL]pci_dev_put() to decrease the reference count. We add a new struct[EOL]'amd_geode_priv' to record pointer of the pci_dev and membase, and then[EOL]add missing pci_dev_put() for the normal and error path.
Live chat
Online