CVE-2022-50267

A flaw was found in the Linux kernel, specifically within the mmc: rtsx_pci driver. A local attacker with low privileges could exploit this vulnerability by triggering a scenario where the mmc_add_host() function's return value is not properly checked. This can lead to a memory leak, which may ultimately cause a kernel crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If an RTSX PCI-based MMC/SD card reader is not required, the rtsx_pci kernel module can be prevented from loading. Create /etc/modprobe.d/blacklist-rtsx_pci.conf with blacklist rtsx_pci. Regenerate the initramfs using dracut -f -v and reboot the system. This may impact functionality if the card reader is in use.