CVE-2022-50347

Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 16 Sept 2025, 16:11
Last modified:11 May 2026, 19:17

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (cve.org)
EPSS Score
0.02% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Sept 2025, 16:11
Published
Vulnerability first disclosed
11 May 2026, 19:17
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and calling mmc_free_host() in the error path, besides, led_classdev_unregister() and pm_runtime_disable() also need be called.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 6%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < d7ad7278be401b09c9f9a9f522cf4c449c7fd489 | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < e598c9683fe1cf97c2b11b800cc3cee072108220 | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < 89303ddbb502c3bc8edbf864f9f85500c8fe07e9 | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < 937112e991ed25d1727d878734adcbef3b900274 | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < 7fa922c7a3dd623fd59f1af50e8896fd9ca7f654 | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < df683201c7ffbd21a806a7cad657b661c5ebfb6f | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < 1491667d5450778a265eddddd294219acfd648cb | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < a522e26a20a43dcfbef9ee9f71ed803290e852b0 | ≥ c7f6558d84afe60016b8103c0737df6e376a1c2d, < fc38a5a10e9e5a75eb9189854abeb8405b214cc9 | 3.16

  • linux•linux_kernel

    ≥ 3.16, < 4.9.337 | ≥ 4.10, < 4.14.303 | ≥ 4.15, < 4.19.270 | ≥ 4.20, < 5.4.229 | ≥ 5.5, < 5.10.163 | ≥ 5.11, < 5.15.86 | ≥ 5.16, < 6.0.16 | ≥ 6.1, < 6.1.2

References (9)