CVE-2022-50769

mmc: mxcmmc: fix return value check of mmc_add_host()

State: Published
Severity: Not scored
Published: Dec 24, 2025
Updated: May 11, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: mxcmmc: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path.

So fix this by checking the return value and goto error path which will call mmc_free_host().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d96be879ff469759af6d7fcebdb66237c18da6f8 to before 5f35c038c9f4d258b3cf77885a2730f1417d63e7Affected d96be879ff469759af6d7fcebdb66237c18da6f8 to before 1cf0c1e58738b97e2de207846105b6a5d46622eeAffected d96be879ff469759af6d7fcebdb66237c18da6f8 to before b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89Affected d96be879ff469759af6d7fcebdb66237c18da6f8 to before 32eb502c972dfc34413c9147418b3d94d870c2b8Affected d96be879ff469759af6d7fcebdb66237c18da6f8 to before 3904eb97bb78fdca3e16d30a38ce5697b9686110Affected d96be879ff469759af6d7fcebdb66237c18da6f8 to before 2d496050ded83b13b16f05e1fc0329b0210d2493Affected d96be879ff469759af6d7fcebdb66237c18da6f8 to before d37474ab9a79149075f0823315c6d45dd983a78cAffected d96be879ff469759af6d7fcebdb66237c18da6f8 to before d2ead18bc7cc166220cab5a744a05c5b69431a12Affected d96be879ff469759af6d7fcebdb66237c18da6f8 to before cde600af7b413c9fe03e85c58c4279df90e91d13Affected
LinuxLinux	2.6.29Affected before 2.6.29Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

d96be879ff469759af6d7fcebdb66237c18da6f8 to before 5f35c038c9f4d258b3cf77885a2730f1417d63e7Affected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before 1cf0c1e58738b97e2de207846105b6a5d46622eeAffected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89Affected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before 32eb502c972dfc34413c9147418b3d94d870c2b8Affected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before 3904eb97bb78fdca3e16d30a38ce5697b9686110Affected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before 2d496050ded83b13b16f05e1fc0329b0210d2493Affected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before d37474ab9a79149075f0823315c6d45dd983a78cAffected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before d2ead18bc7cc166220cab5a744a05c5b69431a12Affected
d96be879ff469759af6d7fcebdb66237c18da6f8 to before cde600af7b413c9fe03e85c58c4279df90e91d13Affected

LinuxLinux

2.6.29Affected
before 2.6.29Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.