{"id":"CVE-2022-50670","state":"PUBLISHED","title":"mmc: omap_hsmmc: fix return value check of mmc_add_host()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: omap_hsmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n   delete device, but it's not added yet, it will lead a kernel\n   crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path wihch\nwill call mmc_free_host().","publishedAt":"2025-12-09T01:29:21.864Z","updatedAt":"2026-05-11T19:23:21.367Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"f153c9e15f8961bdf38707853e15b42ea7c691d9","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"fb3d596267a98813a7a8206097d8d46c98505a0d","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"62005dfcc396424db3337a1dc3ab49623537f5e5","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"a5f8a4583280a76e50329b910e91ef1dea1e6c79","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"4e1dc24bcfc8257f24c0663badec7e4f3ae80558","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"a525cad241c339ca00bf7ebf03c5180f2a9b767c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/omap_hsmmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.29","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.29","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/omap_hsmmc.c"]}],"references":["https://git.kernel.org/stable/c/f153c9e15f8961bdf38707853e15b42ea7c691d9","https://git.kernel.org/stable/c/fb3d596267a98813a7a8206097d8d46c98505a0d","https://git.kernel.org/stable/c/62005dfcc396424db3337a1dc3ab49623537f5e5","https://git.kernel.org/stable/c/a5f8a4583280a76e50329b910e91ef1dea1e6c79","https://git.kernel.org/stable/c/4e1dc24bcfc8257f24c0663badec7e4f3ae80558","https://git.kernel.org/stable/c/a525cad241c339ca00bf7ebf03c5180f2a9b767c"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50670.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50670","state":"PUBLISHED","datePublished":"2025-12-09T01:29:21.864Z","dateUpdated":"2026-05-11T19:23:21.367Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-09T01:26:45.990Z"},"containers":{"cna":{"title":"mmc: omap_hsmmc: fix return value check of mmc_add_host()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: omap_hsmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n   delete device, but it's not added yet, it will lead a kernel\n   crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path wihch\nwill call mmc_free_host()."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"f153c9e15f8961bdf38707853e15b42ea7c691d9","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"fb3d596267a98813a7a8206097d8d46c98505a0d","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"62005dfcc396424db3337a1dc3ab49623537f5e5","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"a5f8a4583280a76e50329b910e91ef1dea1e6c79","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"4e1dc24bcfc8257f24c0663badec7e4f3ae80558","versionType":"git"},{"version":"a45c6cb816474cefe56059fce422a9bdcd77e0dc","status":"affected","lessThan":"a525cad241c339ca00bf7ebf03c5180f2a9b767c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/omap_hsmmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.29","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.29","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/omap_hsmmc.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/f153c9e15f8961bdf38707853e15b42ea7c691d9"},{"url":"https://git.kernel.org/stable/c/fb3d596267a98813a7a8206097d8d46c98505a0d"},{"url":"https://git.kernel.org/stable/c/62005dfcc396424db3337a1dc3ab49623537f5e5"},{"url":"https://git.kernel.org/stable/c/a5f8a4583280a76e50329b910e91ef1dea1e6c79"},{"url":"https://git.kernel.org/stable/c/4e1dc24bcfc8257f24c0663badec7e4f3ae80558"},{"url":"https://git.kernel.org/stable/c/a525cad241c339ca00bf7ebf03c5180f2a9b767c"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:23:21.367Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.4.229"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.10.163"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.15.86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"6.0.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"6.1.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"6.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}