CVE-2022-50618

Source
https://cve.org/CVERecord?id=CVE-2022-50618
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50618.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50618
Downstream
Related
Published
2025-12-08T01:16:31.649Z
Modified
2026-03-20T11:47:33.137821Z
Summary
mmc: meson-gx: fix return value check of mmc_add_host()
Details

In the Linux kernel, the following vulnerability has been resolved:

mmc: meson-gx: fix return value check of mmcaddhost()

mmcaddhost() may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost() is leaked. 2. In the remove() path, mmcremovehost() will be called to delete device, but it's not added yet, it will lead a kernel crash because of null-ptr-deref in device_del().

Fix this by checking the return value and goto error path which will call mmcfreehost().

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50618.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
51c5d8447bd71b7e539c19c46a03b73c0e91fa66
Fixed
f5506e0bbb25102bd8ef2e1a3b483a0b934e454e
Fixed
9e11c6bb745be4e9b325cf96031b4ea34801342d
Fixed
64b2c441171febf075bd9632aca579afda8ab9fb
Fixed
e0cfe7aa41f3965f5224affd88afd48c60f6ad1f
Fixed
42343e3c6195e934b9cb4c08b7ff84a3778d77f9
Fixed
f5ce76aeddf01ca8f2a80fc37119388d59db7c10
Fixed
90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50618.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.19.270
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.229
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.163
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.86
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.16
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50618.json"