---
id: CVE-2022-50267
title: 'mmc: rtsx_pci: fix return value check of mmc_add_host()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mmc: rtsx_pci: fix return value check of mmc_add_host()

  mmc_add_host() may return error, if we ignore its return value, the memory
  that allocated in mmc_alloc_host() w…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c <
    30dc645461dfc63e52b3af8ee4a98e17bf14bacf
  - >-
    Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c <
    5cd4e04eccaec140da6fa04db056a76282ee6852
  - >-
    Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c <
    ffa9b2a79e3e959683efbad3f6db937eca9d38f5
  - >-
    Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c <
    0c87db77423a282b3b38b8a6daf057b822680516
  - Linux 3.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:08:12.355190Z'
published: '2025-09-15'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:10:31.858Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50267'
references:
  - url: 'https://git.kernel.org/stable/c/30dc645461dfc63e52b3af8ee4a98e17bf14bacf'
  - url: 'https://git.kernel.org/stable/c/5cd4e04eccaec140da6fa04db056a76282ee6852'
  - url: 'https://git.kernel.org/stable/c/ffa9b2a79e3e959683efbad3f6db937eca9d38f5'
  - url: 'https://git.kernel.org/stable/c/0c87db77423a282b3b38b8a6daf057b822680516'
tags:
  - cve.org
epss: 0.00159
epssPercentile: 0.05075
ingestedAt: '2026-11-05T22:38:31.714Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mmc: rtsx_pci: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, the memory
that allocated in mmc_alloc_host() will be leaked and it will lead a kernel
crash because of deleting not added device in the remove path.

So fix this by checking the return value and calling mmc_free_host() in the
error path, beside, runtime PM also needs be disabled.

## Affected

- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 30dc645461dfc63e52b3af8ee4a98e17bf14bacf`
- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 5cd4e04eccaec140da6fa04db056a76282ee6852`
- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < ffa9b2a79e3e959683efbad3f6db937eca9d38f5`
- `Linux >= ff984e57d36e8ac468849a144a36f1c11f88b61c < 0c87db77423a282b3b38b8a6daf057b822680516`
- `Linux 3.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.