CVE-2022-50251
mmc: vub300: fix return value check of mmc_add_host()
Description
In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, the timer added before mmc_add_host() needs be del. And this patch fixes another missing call mmc_free_host() if usb_control_msg() fails.
INFO
Published Date :
Sept. 15, 2025, 2:15 p.m.
Last Modified :
Sept. 15, 2025, 3:21 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2022-50251
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Check the return value of mmc_add_host().
- Call mmc_free_host() on error.
- Delete the timer added before mmc_add_host().
- Ensure mmc_free_host() is called if usb_control_msg() fails.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-50251.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-50251 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-50251
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-50251 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-50251 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 15, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, the timer added before mmc_add_host() needs be del. And this patch fixes another missing call mmc_free_host() if usb_control_msg() fails. Added Reference https://git.kernel.org/stable/c/0613ad2401f88bdeae5594c30afe318e93b14676 Added Reference https://git.kernel.org/stable/c/2044b2ea77945f372ef161d1bbf814e471767ff2 Added Reference https://git.kernel.org/stable/c/25f05d762ca5e1c685002a53dd44f68e78ca3feb Added Reference https://git.kernel.org/stable/c/3049a3b927a40d89d4582ff1033cd7953be773c7 Added Reference https://git.kernel.org/stable/c/3b29f8769d32016b2d89183db4d80c7a71b7e35e Added Reference https://git.kernel.org/stable/c/41ed46bdbd2878cd6567abe0974a445f8b1b8ec8 Added Reference https://git.kernel.org/stable/c/a46e681151bbdacdf6b89ee8c4e5bad0555142bb Added Reference https://git.kernel.org/stable/c/afc898019e7bf18c5eb7a0ac19852fcb1b341b3c Added Reference https://git.kernel.org/stable/c/c9e85979b59cb86f0a15defa8199d740e2b36b90