CVE-2022-50268

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: moxart: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path.

So fix this by checking the return value and goto error path which will call mmc_free_host().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < a4c765f5d8e58138cff69f1510b2e8942ec37022; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < a94d466f31a5201995d39bc1208e2c09ab04f0bf; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < c7e9a2059fb943fc3c3fa12261518fd72a0fc136; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < b174f2b36c638fc7737df6c8aac1889a646be98f; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < 7c3b301ca8b0cab392c71da8fcdfa499074f8e97; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < f0502fe86a2db2336c9498d2de3e97f22dcf85ae; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < 8f8bb62c7c5c833758ef1563fe738afd579c3efe; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < 40aa73c70e8a5706f9cbe01409a5e51cc0f1750e; >= 1b66e94e6b9995323190f31c51d8e1a6f516627e, < 0ca18d09c744fb030ae9bc5836c3e357e0237dea
LinuxLinux3.16

References

Timeline

Published
Sep 15, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-502695.5In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix memory leak in vkms_init() A memory leak was reported afCVE-2022-502707.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b ("f2fs: show moCVE-2022-502715.5In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a laCVE-2022-502725.5In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() Wei ChCVE-2022-502735.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on destination blkaddr during recovery AsCVE-2022-502747.8In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvb_unregister_device() is kCVE-2022-502755.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpi_put_table() to fix memory leak When thCVE-2022-502765.5In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_batteCVE-2022-502775.5In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesyCVE-2022-502785.5In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1CVE-2022-502797.1In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpowCVE-2022-502805.5In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagate_mnt() function handl
CVE-2022-50268: Medium severity, CVSS 5.5 | Vulnix