{"id":"CVE-2022-50618","state":"PUBLISHED","title":"mmc: meson-gx: fix return value check of mmc_add_host()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: meson-gx: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n   delete device, but it's not added yet, it will lead a kernel\n   crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path which\nwill call mmc_free_host().","publishedAt":"2025-12-08T01:16:31.649Z","updatedAt":"2026-05-11T19:22:19.752Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"f5506e0bbb25102bd8ef2e1a3b483a0b934e454e","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"9e11c6bb745be4e9b325cf96031b4ea34801342d","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"64b2c441171febf075bd9632aca579afda8ab9fb","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"e0cfe7aa41f3965f5224affd88afd48c60f6ad1f","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"42343e3c6195e934b9cb4c08b7ff84a3778d77f9","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"f5ce76aeddf01ca8f2a80fc37119388d59db7c10","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/meson-gx-mmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.10","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.10","versionType":"semver"},{"version":"4.19.270","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/meson-gx-mmc.c"]}],"references":["https://git.kernel.org/stable/c/f5506e0bbb25102bd8ef2e1a3b483a0b934e454e","https://git.kernel.org/stable/c/9e11c6bb745be4e9b325cf96031b4ea34801342d","https://git.kernel.org/stable/c/64b2c441171febf075bd9632aca579afda8ab9fb","https://git.kernel.org/stable/c/e0cfe7aa41f3965f5224affd88afd48c60f6ad1f","https://git.kernel.org/stable/c/42343e3c6195e934b9cb4c08b7ff84a3778d77f9","https://git.kernel.org/stable/c/f5ce76aeddf01ca8f2a80fc37119388d59db7c10","https://git.kernel.org/stable/c/90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50618.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50618","state":"PUBLISHED","datePublished":"2025-12-08T01:16:31.649Z","dateUpdated":"2026-05-11T19:22:19.752Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-08T01:14:55.189Z"},"containers":{"cna":{"title":"mmc: meson-gx: fix return value check of mmc_add_host()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: meson-gx: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n   delete device, but it's not added yet, it will lead a kernel\n   crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path which\nwill call mmc_free_host()."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"f5506e0bbb25102bd8ef2e1a3b483a0b934e454e","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"9e11c6bb745be4e9b325cf96031b4ea34801342d","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"64b2c441171febf075bd9632aca579afda8ab9fb","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"e0cfe7aa41f3965f5224affd88afd48c60f6ad1f","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"42343e3c6195e934b9cb4c08b7ff84a3778d77f9","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"f5ce76aeddf01ca8f2a80fc37119388d59db7c10","versionType":"git"},{"version":"51c5d8447bd71b7e539c19c46a03b73c0e91fa66","status":"affected","lessThan":"90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/meson-gx-mmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.10","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.10","versionType":"semver"},{"version":"4.19.270","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/meson-gx-mmc.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/f5506e0bbb25102bd8ef2e1a3b483a0b934e454e"},{"url":"https://git.kernel.org/stable/c/9e11c6bb745be4e9b325cf96031b4ea34801342d"},{"url":"https://git.kernel.org/stable/c/64b2c441171febf075bd9632aca579afda8ab9fb"},{"url":"https://git.kernel.org/stable/c/e0cfe7aa41f3965f5224affd88afd48c60f6ad1f"},{"url":"https://git.kernel.org/stable/c/42343e3c6195e934b9cb4c08b7ff84a3778d77f9"},{"url":"https://git.kernel.org/stable/c/f5ce76aeddf01ca8f2a80fc37119388d59db7c10"},{"url":"https://git.kernel.org/stable/c/90935f16f2650ab7416fa2ffbe5c28cb39cf3f1e"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:22:19.752Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"4.19.270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"5.4.229"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"5.10.163"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"5.15.86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"6.0.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"6.1.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.10","versionEndExcluding":"6.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}