CVE-2022-50886
published 2025-12-30CVE-2022-50886: In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return error, if…
PriorityP419low3.3
EPSS
0.20%
10.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host(), besides, free_irq() also needs be called.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < 34ae492f8d172f0bd193c24cad588b35419ea47a | 34ae492f8d172f0bd193c24cad588b35419ea47a |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < 3329e7b7132ca727263fb0ee214cf52cc6dcaaad | 3329e7b7132ca727263fb0ee214cf52cc6dcaaad |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < 4f6cb1c685f9e20a4a9fa565e442f5af4dad70ff | 4f6cb1c685f9e20a4a9fa565e442f5af4dad70ff |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < 3dbb69a0242c31ea4c9eee22b1c41b515fe509a0 | 3dbb69a0242c31ea4c9eee22b1c41b515fe509a0 |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < aabbedcb6c9a72d12d35dc672e83f0c8064d8a61 | aabbedcb6c9a72d12d35dc672e83f0c8064d8a61 |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < 6444079767b68b1fbed0e7668081146e80dcb719 | 6444079767b68b1fbed0e7668081146e80dcb719 |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < 647e370dd0ef7e212d8d014bda748e461eab2e8c | 647e370dd0ef7e212d8d014bda748e461eab2e8c |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < bfd77b194c94aefbde4efc30ddf8607dd9244672 | bfd77b194c94aefbde4efc30ddf8607dd9244672 |
| linux | linux | >= a5eb8bbd66ccf9f169419f9652544aec771b7c57 < f670744a316ea983113a65313dcd387b5a992444 | f670744a316ea983113a65313dcd387b5a992444 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 3.19.0 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mmc: toshsd: fix return value check of mmc_add_host()
vendor_redhat·2025-12-30·CVSS 3.3
CVE-2022-50886 [LOW] CWE-252 kernel: mmc: toshsd: fix return value check of mmc_add_host()
kernel: mmc: toshsd: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host(), besides, free_irq() also needs be called.
A flaw was found in the Linux kernel's Toshiba SD/MMC card reader driver (toshsd). The driver fails to check the return value of mmc_add_host(). If this function fails, memory allocated by mmc_alloc_host() is leaked, and a subsequent driver removal attempt will cr
Debian
CVE-2022-50886: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd...
vendor_debian·2022
CVE-2022-50886 CVE-2022-50886: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd...
In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, free_irq() also needs be called.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
OSV
CVE-2022-50886: In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return er
osv·2025-12-30
CVE-2022-50886 CVE-2022-50886: In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return er
In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, free_irq() also needs be called.
OSV
mmc: toshsd: fix return value check of mmc_add_host()
osv·2025-12-30
CVE-2022-50886 mmc: toshsd: fix return value check of mmc_add_host()
mmc: toshsd: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host(), besides, free_irq() also needs be called.
GHSA
GHSA-78fc-p8m9-qw92: In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return
ghsa_unreviewed·2025-12-30
CVE-2022-50886 GHSA-78fc-p8m9-qw92: In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return
In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host(), besides, free_irq() also needs be called.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2022-50886 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50886 CVE-2022-50886 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50886 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host(), besides, free_irq() also needs be called.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 1
Bugzilla
CVE-2022-50886 kernel: mmc: toshsd: fix return value check of mmc_add_host()
bugzilla·2025-12-30
CVE-2022-50886 [LOW] CVE-2022-50886 kernel: mmc: toshsd: fix return value check of mmc_add_host()
CVE-2022-50886 kernel: mmc: toshsd: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved:
mmc: toshsd: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call
mmc_free_host(), besides, free_irq() also needs be called.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123021-CVE-2022-50886-a081@gregkh/T
https://git.kernel.org/stable/c/3329e7b7132ca727263fb0ee214cf52cc6dcaaadhttps://git.kernel.org/stable/c/34ae492f8d172f0bd193c24cad588b35419ea47ahttps://git.kernel.org/stable/c/3dbb69a0242c31ea4c9eee22b1c41b515fe509a0https://git.kernel.org/stable/c/4f6cb1c685f9e20a4a9fa565e442f5af4dad70ffhttps://git.kernel.org/stable/c/6444079767b68b1fbed0e7668081146e80dcb719https://git.kernel.org/stable/c/647e370dd0ef7e212d8d014bda748e461eab2e8chttps://git.kernel.org/stable/c/aabbedcb6c9a72d12d35dc672e83f0c8064d8a61https://git.kernel.org/stable/c/bfd77b194c94aefbde4efc30ddf8607dd9244672https://git.kernel.org/stable/c/f670744a316ea983113a65313dcd387b5a992444
2025-12-30
Published