{"id":"CVE-2022-50846","state":"PUBLISHED","title":"mmc: via-sdmmc: fix return value check of mmc_add_host()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: via-sdmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n   delete device, but it's not added yet, it will lead a kernel\n   crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path which\nwill call mmc_free_host().","publishedAt":"2025-12-30T12:11:03.286Z","updatedAt":"2026-05-11T19:26:14.924Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"076bcd2c93e16b05c10564e299d6e5d26a766d00","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"12b8e81b77c05c658efd9cde3585bbd65ae39b59","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"95025a8dd0ec015872f6c16473fe04d6264e68ca","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"f59ef2a47a228e51322ad76752a55a8917c56e38","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"63400da6cd37a9793c19bb6aed7131b58b975a04","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"0959cc1685eb19774300d43ef25e318b457b156b","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"0ec94795114edc7e24ec71849dce42bfa61dafa3","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"ba91b413983a9235792523c6b9f7ba2586c4d75d","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"e4e46fb61e3bb4628170810d3f2b996b709b90d9","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/via-sdmmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.31","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.31","versionType":"semver"},{"version":"4.9.337","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.303","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.270","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/via-sdmmc.c"]}],"references":["https://git.kernel.org/stable/c/076bcd2c93e16b05c10564e299d6e5d26a766d00","https://git.kernel.org/stable/c/12b8e81b77c05c658efd9cde3585bbd65ae39b59","https://git.kernel.org/stable/c/95025a8dd0ec015872f6c16473fe04d6264e68ca","https://git.kernel.org/stable/c/f59ef2a47a228e51322ad76752a55a8917c56e38","https://git.kernel.org/stable/c/63400da6cd37a9793c19bb6aed7131b58b975a04","https://git.kernel.org/stable/c/0959cc1685eb19774300d43ef25e318b457b156b","https://git.kernel.org/stable/c/0ec94795114edc7e24ec71849dce42bfa61dafa3","https://git.kernel.org/stable/c/ba91b413983a9235792523c6b9f7ba2586c4d75d","https://git.kernel.org/stable/c/e4e46fb61e3bb4628170810d3f2b996b709b90d9"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50846.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50846","state":"PUBLISHED","datePublished":"2025-12-30T12:11:03.286Z","dateUpdated":"2026-05-11T19:26:14.924Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-30T12:06:07.134Z"},"containers":{"cna":{"title":"mmc: via-sdmmc: fix return value check of mmc_add_host()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: via-sdmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value,\nit will lead two issues:\n1. The memory that allocated in mmc_alloc_host() is leaked.\n2. In the remove() path, mmc_remove_host() will be called to\n   delete device, but it's not added yet, it will lead a kernel\n   crash because of null-ptr-deref in device_del().\n\nFix this by checking the return value and goto error path which\nwill call mmc_free_host()."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"076bcd2c93e16b05c10564e299d6e5d26a766d00","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"12b8e81b77c05c658efd9cde3585bbd65ae39b59","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"95025a8dd0ec015872f6c16473fe04d6264e68ca","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"f59ef2a47a228e51322ad76752a55a8917c56e38","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"63400da6cd37a9793c19bb6aed7131b58b975a04","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"0959cc1685eb19774300d43ef25e318b457b156b","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"0ec94795114edc7e24ec71849dce42bfa61dafa3","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"ba91b413983a9235792523c6b9f7ba2586c4d75d","versionType":"git"},{"version":"f0bf7f61b8405224bc52fc9a3ccd167a68126e00","status":"affected","lessThan":"e4e46fb61e3bb4628170810d3f2b996b709b90d9","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/via-sdmmc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.31","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.31","versionType":"semver"},{"version":"4.9.337","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.303","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.270","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.86","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.16","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.2","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/host/via-sdmmc.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/076bcd2c93e16b05c10564e299d6e5d26a766d00"},{"url":"https://git.kernel.org/stable/c/12b8e81b77c05c658efd9cde3585bbd65ae39b59"},{"url":"https://git.kernel.org/stable/c/95025a8dd0ec015872f6c16473fe04d6264e68ca"},{"url":"https://git.kernel.org/stable/c/f59ef2a47a228e51322ad76752a55a8917c56e38"},{"url":"https://git.kernel.org/stable/c/63400da6cd37a9793c19bb6aed7131b58b975a04"},{"url":"https://git.kernel.org/stable/c/0959cc1685eb19774300d43ef25e318b457b156b"},{"url":"https://git.kernel.org/stable/c/0ec94795114edc7e24ec71849dce42bfa61dafa3"},{"url":"https://git.kernel.org/stable/c/ba91b413983a9235792523c6b9f7ba2586c4d75d"},{"url":"https://git.kernel.org/stable/c/e4e46fb61e3bb4628170810d3f2b996b709b90d9"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:26:14.924Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"4.9.337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"4.14.303"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"4.19.270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"5.4.229"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"5.10.163"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"5.15.86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"6.0.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"6.1.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.31","versionEndExcluding":"6.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}