CVE-2022-50353

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The mmc add host() function may return an error, and failing to check this return value can lead to a memory leak. This memory leak occurs because memory allocated in mmc alloc host() is not freed. Subsequently, attempting to delete a device that was not properly added can cause a kernel crash. The issue is resolved by checking the return value of mmc add host() and including a call to mmc free host() in the error path, as well as clk disable unprepare().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.