CVE-2022-50769
published 2025-12-24CVE-2022-50769: In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if…
PriorityP420low3.3
EPSS
0.24%
15.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host().
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < 5f35c038c9f4d258b3cf77885a2730f1417d63e7 | 5f35c038c9f4d258b3cf77885a2730f1417d63e7 |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < 1cf0c1e58738b97e2de207846105b6a5d46622ee | 1cf0c1e58738b97e2de207846105b6a5d46622ee |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89 | b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89 |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < 32eb502c972dfc34413c9147418b3d94d870c2b8 | 32eb502c972dfc34413c9147418b3d94d870c2b8 |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < 3904eb97bb78fdca3e16d30a38ce5697b9686110 | 3904eb97bb78fdca3e16d30a38ce5697b9686110 |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < 2d496050ded83b13b16f05e1fc0329b0210d2493 | 2d496050ded83b13b16f05e1fc0329b0210d2493 |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < d37474ab9a79149075f0823315c6d45dd983a78c | d37474ab9a79149075f0823315c6d45dd983a78c |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < d2ead18bc7cc166220cab5a744a05c5b69431a12 | d2ead18bc7cc166220cab5a744a05c5b69431a12 |
| linux | linux | >= d96be879ff469759af6d7fcebdb66237c18da6f8 < cde600af7b413c9fe03e85c58c4279df90e91d13 | cde600af7b413c9fe03e85c58c4279df90e91d13 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.29 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mmc: mxcmmc: fix return value check of mmc_add_host()
vendor_redhat·2025-12-24·CVSS 3.3
CVE-2022-50769 [LOW] CWE-252 kernel: mmc: mxcmmc: fix return value check of mmc_add_host()
kernel: mmc: mxcmmc: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host().
A flaw was found in the Linux kernel's Freescale MXC MMC driver. The mxcmmc driver fails to check the return value of mmc_add_host(). If this function fails, memory allocated by mmc_alloc_host() is leaked, and a subsequent driver removal will crash the kernel when attempting to delete a device that was ne
Debian
CVE-2022-50769: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc...
vendor_debian·2022
CVE-2022-50769 CVE-2022-50769: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc...
In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
OSV
mmc: mxcmmc: fix return value check of mmc_add_host()
osv·2025-12-24
CVE-2022-50769 mmc: mxcmmc: fix return value check of mmc_add_host()
mmc: mxcmmc: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host().
OSV
CVE-2022-50769: In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return er
osv·2025-12-24
CVE-2022-50769 CVE-2022-50769: In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return er
In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host().
GHSA
GHSA-c8hr-j464-wc7x: In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return
ghsa_unreviewed·2025-12-24
CVE-2022-50769 GHSA-c8hr-j464-wc7x: In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return
In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host().
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50769 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50769 CVE-2022-50769 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50769 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host().
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 15.2
Exploitation Probability (EPSS) N/A
Bugzilla
CVE-2022-50769 kernel: mmc: mxcmmc: fix return value check of mmc_add_host()
bugzilla·2025-12-24
CVE-2022-50769 [LOW] CVE-2022-50769 kernel: mmc: mxcmmc: fix return value check of mmc_add_host()
CVE-2022-50769 kernel: mmc: mxcmmc: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved:
mmc: mxcmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host().
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122457-CVE-2022-50769-f4db@gregkh/T
https://git.kernel.org/stable/c/1cf0c1e58738b97e2de207846105b6a5d46622eehttps://git.kernel.org/stable/c/2d496050ded83b13b16f05e1fc0329b0210d2493https://git.kernel.org/stable/c/32eb502c972dfc34413c9147418b3d94d870c2b8https://git.kernel.org/stable/c/3904eb97bb78fdca3e16d30a38ce5697b9686110https://git.kernel.org/stable/c/5f35c038c9f4d258b3cf77885a2730f1417d63e7https://git.kernel.org/stable/c/b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89https://git.kernel.org/stable/c/cde600af7b413c9fe03e85c58c4279df90e91d13https://git.kernel.org/stable/c/d2ead18bc7cc166220cab5a744a05c5b69431a12https://git.kernel.org/stable/c/d37474ab9a79149075f0823315c6d45dd983a78c
2025-12-24
Published