CVE-2022-50846

mmc: via-sdmmc: fix return value check of mmc_add_host()

N/A
Published: December 30, 2025 at 12:11 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmc_alloc_host() is leaked. 2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del(). Fix this by checking the return value and goto error path which will call mmc_free_host().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.31 ≤ v < 4.14.3032.6.31 ≤ v < 4.19.2702.6.31 ≤ v < 4.9.3372.6.31 ≤ v < 5.10.1632.6.31 ≤ v < 5.15.862.6.31 ≤ v < 5.4.2292.6.31 ≤ v < 6.0.162.6.31 ≤ v < 6.1.22.6.31 ≤ v < 6.22.6.31f0bf7f61b8405224bc52fc9a3ccd167a68126e00
Vendor states this is fixed in 0ec94795114edc7e24ec71849dce42bfa61dafa3 (fixed)
Vendor states this is fixed in 12b8e81b77c05c658efd9cde3585bbd65ae39b59 (fixed)
Vendor states this is fixed in 63400da6cd37a9793c19bb6aed7131b58b975a04 (fixed)
Vendor states this is fixed in 76bcd2c93e16b5c10564e299d6e5d26a766d0 (fixed)
Vendor states this is fixed in 95025a8dd0ec015872f6c16473fe04d6264e68ca (fixed)
Vendor states this is fixed in 959cc1685eb19774300d43ef25e318b457b156b (fixed)
Vendor states this is fixed in ba91b413983a9235792523c6b9f7ba2586c4d75d (fixed)
Vendor states this is fixed in e4e46fb61e3bb4628170810d3f2b996b709b90d9 (fixed)
Vendor states this is fixed in f59ef2a47a228e51322ad76752a55a8917c56e38 (fixed)
Vendor states this is fixed in 2.6.31 (unaffected)
Vendor states this is fixed in 4.14.303 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 4.9.337 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.86 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.16 (unaffected)
Vendor states this is fixed in 6.1.2 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card