CVE-2022-50653

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50653
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50653.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50653
Downstream
Related
Published
2025-12-09T00:00:27Z
Modified
2026-08-12T03:51:20Z
Summary
mmc: atmel-mci: fix return value check of mmc_add_host()
Details

In the Linux kernel, the following vulnerability has been resolved:

mmc: atmel-mci: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, it will lead two issues:

  1. The memory that allocated in mmc_alloc_host() is leaked.
  2. In the remove() path, mmc_remove_host() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del().

So fix this by checking the return value and calling mmc_free_host() in the error path.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50653.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7d2be0749a59096a334c94dc48f43294193cb8ed
Fixed
99a6cdfa2cf05028b52f6d8ee85ccc5f8b71b4a2
Fixed
6bb26abb92f25e582a0976091a10b539fe3796db
Fixed
00ac0f5f95920f003cd6ece53cdc759549b69118
Fixed
1925472dec31ec061d57412b3a65a056ea24f340
Fixed
cc8bb436f3c842a86b9082d97933582120d180e2
Fixed
85946ceb0fac20ab39cdb85333086daf0291a553
Fixed
9e6e8c43726673ca2abcaac87640b9215fd72f4c

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50653.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.27
Fixed
4.19.270
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.229
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.163
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.86
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.16
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50653.json"