CVE-2022-50670

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s mmc subsystem, specifically within the omap hsmmc driver. The mmc add host() function may return an error, and failure to check this return value can lead to memory leaks and potential kernel crashes. If the return value is ignored, memory allocated by mmc alloc host() is not freed. Additionally, the remove() path may call mmc remove host() on a device that was not properly added, resulting in a null pointer dereference and a kernel crash. The issue stems from an inadequate check of the return value of the mmc add host() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.