Riskcovery

CVE-2022-50670

mmc: omap_hsmmc: fix return value check of mmc_add_host()

State
Published
Severity
Not scored
Published
Dec 9, 2025
Updated
May 11, 2026
Reserved
Dec 9, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: omap_hsmmc: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmc_alloc_host() is leaked. 2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del().

Fix this by checking the return value and goto error path wihch will call mmc_free_host().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a45c6cb816474cefe56059fce422a9bdcd77e0dc to before f153c9e15f8961bdf38707853e15b42ea7c691d9Affected
  • a45c6cb816474cefe56059fce422a9bdcd77e0dc to before fb3d596267a98813a7a8206097d8d46c98505a0dAffected
  • a45c6cb816474cefe56059fce422a9bdcd77e0dc to before 62005dfcc396424db3337a1dc3ab49623537f5e5Affected
  • a45c6cb816474cefe56059fce422a9bdcd77e0dc to before a5f8a4583280a76e50329b910e91ef1dea1e6c79Affected
  • a45c6cb816474cefe56059fce422a9bdcd77e0dc to before 4e1dc24bcfc8257f24c0663badec7e4f3ae80558Affected
  • a45c6cb816474cefe56059fce422a9bdcd77e0dc to before a525cad241c339ca00bf7ebf03c5180f2a9b767cAffected
LinuxLinux
  • 2.6.29Affected
  • before 2.6.29Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.