CVE-2022-50464: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability has been identified and resolved involving a PCI device refcount leak in mt7915pciinithif2(). The issue stems from pcigetdevice() returning a pcidevice with an increased refcount, requiring a corresponding pcidevput() call to decrease the refcount (NVD).

The vulnerability occurs in the mt76 driver's mt7915 component, specifically in the mt7915pciinithif2() function. The issue arises because pcigetdevice() returns a PCI device with an incremented reference count, but the code failed to properly decrease this count using pcidevput(). The fix involves saving the return value of pcigetdevice() and properly calling pcidev_put() to maintain correct reference counting (NVD).

The vulnerability results in a PCI device refcount leak, which could potentially lead to resource management issues in the Linux kernel. Ubuntu has classified this as a medium priority issue, indicating moderate severity (Ubuntu).

The issue has been addressed through a kernel patch that properly manages the PCI device reference count. Various Linux distributions have incorporated the fix into their kernel updates. For Ubuntu systems, the fix has been applied to multiple kernel versions, with some packages marked as 'not affected' and others requiring updates (Ubuntu).