CVE-2022-50267

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-09-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_pci: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and calling mmc_free_host() in the error path, beside, runtime PM also needs be disabled.

Weakness Classification (1)

CWE-476

Affected Software (6)

Vendor	Product	Version
Linux	Linux	ff984e57d36e8ac468849a144a36f1c11f88b61c < 30dc645461dfc63e52b3af8ee4a98e17bf14bacf
Linux	Linux	ff984e57d36e8ac468849a144a36f1c11f88b61c < 5cd4e04eccaec140da6fa04db056a76282ee6852
Linux	Linux	ff984e57d36e8ac468849a144a36f1c11f88b61c < ffa9b2a79e3e959683efbad3f6db937eca9d38f5
Linux	Linux	ff984e57d36e8ac468849a144a36f1c11f88b61c < 0c87db77423a282b3b38b8a6daf057b822680516
Linux	Linux	3.8
linux	linux_kernel	3.8 – 5.15.86