CVE-2022-50520: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2022-50520) was identified in the drm/radeon subsystem, specifically in the radeonatrmget_bios() function. The issue was discovered and reported through the kernel.org bug tracking system (NVD).

The vulnerability stems from a PCI device refcount leak in the radeonatrmgetbios() function. According to the documentation, pcigetclass() returns a PCI device with its refcount increased and decreases the refcount for the input parameter @from if it is not NULL. When breaking the loop in radeonatrmgetbios() with 'pdev' not NULL, the code failed to call pcidevput() to decrease the refcount, resulting in a reference count leak (NVD).

The vulnerability results in a memory leak in the kernel due to improper reference counting of PCI devices. This could potentially lead to resource exhaustion over time if the affected code path is repeatedly executed (NVD).

The issue has been resolved by adding the missing pcidevput() call to properly decrease the reference count when breaking the loop in radeonatrmget_bios() with a non-NULL pdev value (NVD).