CVE-2022-50618: In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmc_add_host() mmc_add_host() may return error, if…

PriorityP420low5.5

EPSS

0.20%

10.1th percentile

In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmc_alloc_host() is leaked. 2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del(). Fix this by checking the return value and goto error path which will call mmc_free_host().

Affected

19 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.4-1 (bookworm)	linux 6.1.4-1 (bookworm)
linux	linux	—	—
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < f5506e0bbb25102bd8ef2e1a3b483a0b934e454e	f5506e0bbb25102bd8ef2e1a3b483a0b934e454e
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < 9e11c6bb745be4e9b325cf96031b4ea34801342d	9e11c6bb745be4e9b325cf96031b4ea34801342d
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < 64b2c441171febf075bd9632aca579afda8ab9fb	64b2c441171febf075bd9632aca579afda8ab9fb
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < e0cfe7aa41f3965f5224affd88afd48c60f6ad1f	e0cfe7aa41f3965f5224affd88afd48c60f6ad1f
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < 42343e3c6195e934b9cb4c08b7ff84a3778d77f9	42343e3c6195e934b9cb4c08b7ff84a3778d77f9
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < f5ce76aeddf01ca8f2a80fc37119388d59db7c10	f5ce76aeddf01ca8f2a80fc37119388d59db7c10
linux	linux	>= 51c5d8447bd71b7e539c19c46a03b73c0e91fa66 < 90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e	90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e
linux	linux_kernel	>= 0 < 5.10.178-1	5.10.178-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 0 < 6.1.4-1	6.1.4-1
linux	linux_kernel	>= 4.10.0 < 4.19.270	4.19.270
linux	linux_kernel	>= 4.20.0 < 5.4.229	5.4.229
linux	linux_kernel	>= 5.11.0 < 5.15.86	5.15.86
linux	linux_kernel	>= 5.16.0 < 6.0.16	6.0.16
linux	linux_kernel	>= 5.5.0 < 5.10.163	5.10.163
linux	linux_kernel	>= 6.1.0 < 6.1.2	6.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.