CVE-2022-50886

A flaw was found in the Linux kernel's Toshiba SD/MMC card reader driver (toshsd). The driver fails to check the return value of mmc_add_host(). If this function fails, memory allocated by mmc_alloc_host() is leaked, and a subsequent driver removal attempt will crash the kernel by trying to delete a device that was never added.

This flaw affects systems with Toshiba SD/MMC card readers using the toshsd driver. The issue only manifests when mmc_add_host() fails during driver initialization, which is an uncommon error condition. The practical security impact is limited as it requires both specific hardware and an initialization failure to trigger.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the toshsd module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.