CVE-2022-50670

A flaw was found in the OMAP HSMMC driver in the Linux kernel. The driver does not check the return value of mmc_add_host(), which can lead to a memory leak from mmc_alloc_host() and a null pointer dereference crash in mmc_remove_host() when attempting to remove a device that was never successfully added.

This issue only affects systems with OMAP hardware (primarily ARM-based embedded/mobile platforms). Standard x86 enterprise deployments are not impacted by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the omap_hsmmc module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.