{"id":"CVE-2022-50267","title":"mmc: rtsx_pci: fix return value check of mmc_add_host()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: rtsx_pci: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value, the memory\nthat allocated in mmc_alloc_host() w…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 30dc645461dfc63e52b3af8ee4a98e17bf14bacf","Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 5cd4e04eccaec140da6fa04db056a76282ee6852","Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < ffa9b2a79e3e959683efbad3f6db937eca9d38f5","Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 0c87db77423a282b3b38b8a6daf057b822680516","Linux 3.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:08:12.355190Z"},"published":"2025-09-15","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:10:31.858Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50267","references":[{"url":"https://git.kernel.org/stable/c/30dc645461dfc63e52b3af8ee4a98e17bf14bacf"},{"url":"https://git.kernel.org/stable/c/5cd4e04eccaec140da6fa04db056a76282ee6852"},{"url":"https://git.kernel.org/stable/c/ffa9b2a79e3e959683efbad3f6db937eca9d38f5"},{"url":"https://git.kernel.org/stable/c/0c87db77423a282b3b38b8a6daf057b822680516"}],"tags":["cve.org"],"epss":0.00159,"epssPercentile":0.05075,"ingestedAt":"2026-11-05T22:38:31.714Z","slug":"CVE-2022-50267","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmmc: rtsx_pci: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value, the memory\nthat allocated in mmc_alloc_host() will be leaked and it will lead a kernel\ncrash because of deleting not added device in the remove path.\n\nSo fix this by checking the return value and calling mmc_free_host() in the\nerror path, beside, runtime PM also needs be disabled.\n\n## Affected\n\n- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 30dc645461dfc63e52b3af8ee4a98e17bf14bacf`\n- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 5cd4e04eccaec140da6fa04db056a76282ee6852`\n- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < ffa9b2a79e3e959683efbad3f6db937eca9d38f5`\n- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 0c87db77423a282b3b38b8a6daf057b822680516`\n- `Linux 3.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}