CVE-2022-50670

mmc: omap_hsmmc: fix return value check of mmc_add_host()

N/A
Published: December 9, 2025 at 01:29 AM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmc_alloc_host() is leaked. 2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del(). Fix this by checking the return value and goto error path wihch will call mmc_free_host().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.29 ≤ v < 5.10.1632.6.29 ≤ v < 5.15.862.6.29 ≤ v < 5.4.2292.6.29 ≤ v < 6.0.162.6.29 ≤ v < 6.1.22.6.29 ≤ v < 6.22.6.29a45c6cb816474cefe56059fce422a9bdcd77e0dc
Vendor states this is fixed in 4e1dc24bcfc8257f24c0663badec7e4f3ae80558 (fixed)
Vendor states this is fixed in 62005dfcc396424db3337a1dc3ab49623537f5e5 (fixed)
Vendor states this is fixed in a525cad241c339ca00bf7ebf03c5180f2a9b767c (fixed)
Vendor states this is fixed in a5f8a4583280a76e50329b910e91ef1dea1e6c79 (fixed)
Vendor states this is fixed in f153c9e15f8961bdf38707853e15b42ea7c691d9 (fixed)
Vendor states this is fixed in fb3d596267a98813a7a8206097d8d46c98505a0d (fixed)
Vendor states this is fixed in 2.6.29 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card