PT-2025-37505 · Linux+3 · Linux Kernel+3

CVE-2022-50251

·

Published

2022-12-07

·

Updated

2025-10-23

CVSS v3.1

7.6

High

VectorAV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The mmc add host() function may return an error, and ignoring this return value can lead to a memory leak. This memory leak occurs because memory allocated in mmc alloc host() is not freed, potentially causing a kernel crash during device removal. The patch resolves this by checking the return value of mmc add host() and including a call to mmc free host() if usb control msg() fails.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Unchecked Return Value

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
BDU:2026-02519
CVE-2022-50251
OESA-2025-2468
RHSA-2024:9315
SUSE-SU-2025:03615-1
SUSE-SU-2025:03628-1
SUSE-SU-2025:3716-1
SUSE-SU-2025:3761-1

Affected Products

Astra Linux
Linux Kernel
Red Hat
Suse