CVE Database›CVE-2022-50769

CVE-2022-50769

kernel: mmc: mxcmmc: fix return value check of mmc_add_host()

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 24, 2025

Updated · June 30, 2026

Description

A flaw was found in the Linux kernel's Freescale MXC MMC driver. The mxcmmc driver fails to check the return value of mmc_add_host(). If this function fails, memory allocated by mmc_alloc_host() is leaked, and a subsequent driver removal will crash the kernel when attempting to delete a device that was never successfully added.

Statement

This flaw affects embedded systems with Freescale i.MX SoCs using the mxcmmc driver. The issue only manifests when mmc_add_host() fails during driver initialization, which is an uncommon error condition. The memory leak and crash require both specific hardware and an initialization failure to trigger.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-252 · Unchecked Return Value