In the Linux kernel, the following vulnerability has been resolved:
mmc: atmel-mci: fix return value check of mmcaddhost()
mmcaddhost() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost() is leaked. 2. In the remove() path, mmcremovehost() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del().
So fix this by checking the return value and calling mmcfreehost() in the error path.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50653.json"
}