CVE-2022-50618Unchecked Return Value in Linux

Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 85.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 8

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmc_alloc_host() is leaked. 2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del(). Fix this by checking the return value and goto error

Affected Packages4 packages

Linuxlinux/linux_kernel4.10.04.19.270+5
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linux51c5d8447bd71b7e539c19c46a03b73c0e91fa66f5506e0bbb25102bd8ef2e1a3b483a0b934e454e+7
debiandebian/linux< linux 6.1.4-1 (bookworm)

🔴Vulnerability Details

3
OSV
mmc: meson-gx: fix return value check of mmc_add_host()2025-12-08
OSV
CVE-2022-50618: In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmc_add_host() mmc_add_host() may return2025-12-08
GHSA
GHSA-p932-8wx4-gvmj: In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmc_add_host() mmc_add_host() may retur2025-12-08

📋Vendor Advisories

2
Red Hat
kernel: mmc: meson-gx: fix return value check of mmc_add_host()2025-12-08
Debian
CVE-2022-50618: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: meson-...2022