CVE-2022-50268

mmc: moxart: fix return value check of mmc_add_host()

State: Published
Severity: Not scored
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: moxart: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path.

So fix this by checking the return value and goto error path which will call mmc_free_host().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1b66e94e6b9995323190f31c51d8e1a6f516627e to before a4c765f5d8e58138cff69f1510b2e8942ec37022Affected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before a94d466f31a5201995d39bc1208e2c09ab04f0bfAffected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before c7e9a2059fb943fc3c3fa12261518fd72a0fc136Affected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before b174f2b36c638fc7737df6c8aac1889a646be98fAffected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before 7c3b301ca8b0cab392c71da8fcdfa499074f8e97Affected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before f0502fe86a2db2336c9498d2de3e97f22dcf85aeAffected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before 8f8bb62c7c5c833758ef1563fe738afd579c3efeAffected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before 40aa73c70e8a5706f9cbe01409a5e51cc0f1750eAffected 1b66e94e6b9995323190f31c51d8e1a6f516627e to before 0ca18d09c744fb030ae9bc5836c3e357e0237deaAffected
LinuxLinux	3.16Affected before 3.16Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

1b66e94e6b9995323190f31c51d8e1a6f516627e to before a4c765f5d8e58138cff69f1510b2e8942ec37022Affected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before a94d466f31a5201995d39bc1208e2c09ab04f0bfAffected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before c7e9a2059fb943fc3c3fa12261518fd72a0fc136Affected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before b174f2b36c638fc7737df6c8aac1889a646be98fAffected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before 7c3b301ca8b0cab392c71da8fcdfa499074f8e97Affected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before f0502fe86a2db2336c9498d2de3e97f22dcf85aeAffected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before 8f8bb62c7c5c833758ef1563fe738afd579c3efeAffected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before 40aa73c70e8a5706f9cbe01409a5e51cc0f1750eAffected
1b66e94e6b9995323190f31c51d8e1a6f516627e to before 0ca18d09c744fb030ae9bc5836c3e357e0237deaAffected

LinuxLinux

3.16Affected
before 3.16Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.