Riskcovery

CVE-2022-50618

mmc: meson-gx: fix return value check of mmc_add_host()

State
Published
Severity
Not scored
Published
Dec 8, 2025
Updated
May 11, 2026
Reserved
Dec 8, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: meson-gx: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmc_alloc_host() is leaked. 2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del().

Fix this by checking the return value and goto error path which will call mmc_free_host().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before f5506e0bbb25102bd8ef2e1a3b483a0b934e454eAffected
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before 9e11c6bb745be4e9b325cf96031b4ea34801342dAffected
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before 64b2c441171febf075bd9632aca579afda8ab9fbAffected
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before e0cfe7aa41f3965f5224affd88afd48c60f6ad1fAffected
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before 42343e3c6195e934b9cb4c08b7ff84a3778d77f9Affected
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before f5ce76aeddf01ca8f2a80fc37119388d59db7c10Affected
  • 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 to before 90935f16f2650ab7416fa2ffbe5c28cb39cf3f1eAffected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 4.19.270 through 4.19.*Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.