In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0ca18d09c744fb030ae9bc5836c3e357e0237dea cve-icon cve-icon
https://git.kernel.org/stable/c/40aa73c70e8a5706f9cbe01409a5e51cc0f1750e cve-icon cve-icon
https://git.kernel.org/stable/c/7c3b301ca8b0cab392c71da8fcdfa499074f8e97 cve-icon cve-icon
https://git.kernel.org/stable/c/8f8bb62c7c5c833758ef1563fe738afd579c3efe cve-icon cve-icon
https://git.kernel.org/stable/c/a4c765f5d8e58138cff69f1510b2e8942ec37022 cve-icon cve-icon
https://git.kernel.org/stable/c/a94d466f31a5201995d39bc1208e2c09ab04f0bf cve-icon cve-icon
https://git.kernel.org/stable/c/b174f2b36c638fc7737df6c8aac1889a646be98f cve-icon cve-icon
https://git.kernel.org/stable/c/c7e9a2059fb943fc3c3fa12261518fd72a0fc136 cve-icon cve-icon
https://git.kernel.org/stable/c/f0502fe86a2db2336c9498d2de3e97f22dcf85ae cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091504-CVE-2022-50268-bcdf@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50268 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50268 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 17 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 15 Sep 2025 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host().
Title mmc: moxart: fix return value check of mmc_add_host()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-15T14:21:04.555Z

Updated: 2025-09-15T14:21:04.555Z

Reserved: 2025-09-15T13:58:00.975Z

Link: CVE-2022-50268

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-15T15:15:37.580

Modified: 2025-09-15T15:22:27.090

Link: CVE-2022-50268

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2022-50268 - Bugzilla