linux: In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pch...
CVE-2022-50576 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50576, released October 22, 2025. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pch_request_dma() As comment of pci_get_slot() says, it returns a pci_device with its refcount increased. The caller must decrement the reference count by calling pci_dev_put(). Since 'dma_dev' is only used to filter the channel in filter(), we can call pci_dev_put() before exiting from pch_request_dma(). Add the missing pci_dev_put() for the normal and error path.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| linux · Debian 12.15 (bookworm) | 6.1.4-1 | DEBIAN-CVE-2022-50576 | Oct 22, 2025 |
| linux · Debian 13.5 (trixie) | 6.1.4-1 | DEBIAN-CVE-2022-50576 | Oct 22, 2025 |
| linux · Debian 14 | 6.1.4-1 | DEBIAN-CVE-2022-50576 | Oct 22, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.