CVE-2022-50769 - Vulnerability Details

- mmc: mxcmmc: fix return value check of mmc_add_host()

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: mxcmmc: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.

So fix this by checking the return value and goto error path which will call
mmc_free_host().

Published: 2025-12-24

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< 5f35c038c9f4d258b3cf77885a2730f1417d63e7
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< 1cf0c1e58738b97e2de207846105b6a5d46622ee
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< 32eb502c972dfc34413c9147418b3d94d870c2b8
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< 3904eb97bb78fdca3e16d30a38ce5697b9686110
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< 2d496050ded83b13b16f05e1fc0329b0210d2493
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< d37474ab9a79149075f0823315c6d45dd983a78c
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< d2ead18bc7cc166220cab5a744a05c5b69431a12
`d96be879ff469759af6d7fcebdb66237c18da6f8`	affected	< cde600af7b413c9fe03e85c58c4279df90e91d13

Linux

affected

Version	Status	Constraints
`2.6.29`	affected	—
`0`	unaffected	< 2.6.29
`4.9.337`	unaffected	≤ 4.9.*
`4.14.303`	unaffected	≤ 4.14.*
`4.19.270`	unaffected	≤ 4.19.*
`5.4.229`	unaffected	≤ 5.4.*
`5.10.163`	unaffected	≤ 5.10.*
`5.15.86`	unaffected	≤ 5.15.*
`6.0.16`	unaffected	≤ 6.0.*
`6.1.2`	unaffected	≤ 6.1.*
`6.2`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00064.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1cf0c1e58738b97e2de207846105b6a5d46622ee
https://git.kernel.org/stable/c/2d496050ded83b13b16f05e1fc0329b0210d2493
https://git.kernel.org/stable/c/32eb502c972dfc34413c9147418b3d94d870c2b8
https://git.kernel.org/stable/c/3904eb97bb78fdca3e16d30a38ce5697b9686110
https://git.kernel.org/stable/c/5f35c038c9f4d258b3cf77885a2730f1417d63e7
https://git.kernel.org/stable/c/b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89
https://git.kernel.org/stable/c/cde600af7b413c9fe03e85c58c4279df90e91d13
https://git.kernel.org/stable/c/d2ead18bc7cc166220cab5a744a05c5b69431a12
https://git.kernel.org/stable/c/d37474ab9a79149075f0823315c6d45dd983a78c
https://lore.kernel.org/linux-cve-announce/2025122457-CVE-2022-50769-f4db@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50769
https://www.cve.org/CVERecord?id=CVE-2022-50769

History

Thu, 25 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025122457-CVE-2022-50769-f4db@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-50769 https://www.cve.org/CVERecord?id=CVE-2022-50769
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Wed, 24 Dec 2025 13:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host().
Title		mmc: mxcmmc: fix return value check of mmc_add_host()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1cf0c1e58738b97e2de207846105b6a5d46622ee https://git.kernel.org/stable/c/2d496050ded83b13b16f05e1fc0329b0210d2493 https://git.kernel.org/stable/c/32eb502c972dfc34413c9147418b3d94d870c2b8 https://git.kernel.org/stable/c/3904eb97bb78fdca3e16d30a38ce5697b9686110 https://git.kernel.org/stable/c/5f35c038c9f4d258b3cf77885a2730f1417d63e7 https://git.kernel.org/stable/c/b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89 https://git.kernel.org/stable/c/cde600af7b413c9fe03e85c58c4279df90e91d13 https://git.kernel.org/stable/c/d2ead18bc7cc166220cab5a744a05c5b69431a12 https://git.kernel.org/stable/c/d37474ab9a79149075f0823315c6d45dd983a78c

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-24T13:05:58.994Z

Updated: 2026-05-11T19:25:11.217Z

Reserved: 2025-12-24T13:02:21.546Z

Link: CVE-2022-50769

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-24T13:16:03.707

Modified: 2026-04-15T00:35:42.020

Link: CVE-2022-50769

Redhat

Severity : Low

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2022-50769 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object