CVE-2022-50640

Not scored yetLast modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: core: Fix kernel panic when remove non-standard SDIO card

SDIO tuple is only allocated for standard SDIO card, especially it causes memory corruption issues when the non-standard SDIO card has removed, which is because the card device's reference counter does not increase for it at sdio_init_func(), but all SDIO card device reference counter gets decreased at sdio_release_func().

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < b8b2965932e702b21e335ff30e1bb550f5a23b6f; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < b3275dde570b6420106a715bb58a0af041b94d95; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < 1fb79478695d92bab1c120ad3dad05252b02a29d; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < 7a09c64b7da0abdec3919812e3d93ecc44069ed0; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < 8bf037279b5869ae9331c42bb1527d2680ebba96; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < 1e8cd93ae536581562bab4e1d8c5315bbc2548bf; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < 66d461a92f32b6995b630625d350259b6b1f961b; >= 6f51be3d37dff73cf8db771df4169f4c2f1cbf66, < 9972e6b404884adae9eec7463e30d9b3c9a70b18
LinuxLinux2.6.36

References

Timeline

Published
Dec 9, 2025
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-50641In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When returning or breakiCVE-2022-50642In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: zero out stale pointers `cros_typec_geCVE-2022-50643In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_copy_file_range() If the file is used by swCVE-2022-50644In the Linux kernel, the following vulnerability has been resolved: clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe pm_runtCVE-2022-50645In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment CVE-2022-50646In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_allocCVE-2022-50647In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O striCVE-2022-50648In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_callCVE-2022-50649In the Linux kernel, the following vulnerability has been resolved: power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type(CVE-2022-506507.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference state management for synchronous callbacks CurrentlCVE-2022-50651In the Linux kernel, the following vulnerability has been resolved: ethtool: eeprom: fix null-deref on genl_info in dump The similar fix aCVE-2022-50652In the Linux kernel, the following vulnerability has been resolved: uio: uio_dmem_genirq: Fix missing unlock in irq configuration Commit b
CVE-2022-50640: Unscored | Vulnix