CVE-2022-50251

A flaw was found in the Linux kernel's mmc: vub300 module. An incorrect return value check for mmc_add_host() and a missing call to mmc_free_host() when usb_control_msg() fails can lead to memory leaks. A local attacker could exploit this vulnerability, causing the kernel to crash and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the vub300 kernel module from loading. This can be achieved by creating a blacklist rule. Create a file named /etc/modprobe.d/blacklist-vub300.conf with the following content: blacklist vub300. A system reboot is required for the changes to take effect. This mitigation may impact functionality that relies on the vub300 MMC device.