In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, clk_disable_unprepare() also needs be called.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/29276d56f6ed138db0f38cd31aedc0b725c8c76c cve-icon cve-icon
https://git.kernel.org/stable/c/58c3a8d0f1abeb1ca5c2df948be58ad4f7bb6f67 cve-icon cve-icon
https://git.kernel.org/stable/c/70b0620afab3c69d95a7e2dd7ceff162a21c4009 cve-icon cve-icon
https://git.kernel.org/stable/c/9bedf64dda84b29151e41591d8ded9ff0e6d336a cve-icon cve-icon
https://git.kernel.org/stable/c/b40ac3b696a9c84b36211ef0c3f5a422650c101b cve-icon cve-icon
https://git.kernel.org/stable/c/c7a328cea791cc2769b6417943939420913b4a46 cve-icon cve-icon
https://git.kernel.org/stable/c/eb7a2d516d4fbd165c07877a20feccb047342b1f cve-icon cve-icon
https://git.kernel.org/stable/c/ecd6f77af3478f5223aa4011642a891b7dc91228 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091711-CVE-2022-50353-2f1e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50353 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50353 cve-icon
History

Thu, 18 Sep 2025 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 18 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 17 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, clk_disable_unprepare() also needs be called.
Title mmc: wmt-sdmmc: fix return value check of mmc_add_host()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-17T14:56:06.761Z

Updated: 2025-09-17T14:56:06.761Z

Reserved: 2025-09-16T16:03:27.882Z

Link: CVE-2022-50353

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-17T15:15:33.270

Modified: 2025-09-18T13:43:34.310

Link: CVE-2022-50353

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-17T00:00:00Z

Links: CVE-2022-50353 - Bugzilla