PT-2025-37505 · Linux+3 · Linux Kernel+3

Published 2022-12-07 · Updated 2025-10-23 · CVE-2022-50251

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The mmc add host() function may return an error, and ignoring this return value can lead to a memory leak. This memory leak occurs because memory allocated in mmc alloc host() is not freed, potentially causing a kernel crash during device removal. The patch resolves this by checking the return value of mmc add host() and including a call to mmc free host() if usb control msg() fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Memory Leak

Weakness Enumeration

CWE-252

CWE-401

Related Identifiers

ALSA-2025_16880

BDU:2026-02519

CVE-2022-50251

OESA-2025-2468

RHSA-2024:9315

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 893

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50251.json · Exploit
• https://git.kernel.org/stable/c/0613ad2401f88bdeae5594c30afe318e93b14676 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53229 · Security Note
• https://git.kernel.org/stable/c/2044b2ea77945f372ef161d1bbf814e471767ff2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53480 · Security Note
• https://git.kernel.org/stable/c/3049a3b927a40d89d4582ff1033cd7953be773c7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53220 · Security Note
• https://bdu.fstec.ru/vul/2026-02519 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50251 · Vendor Advisory
• https://git.kernel.org/stable/c/41ed46bdbd2878cd6567abe0974a445f8b1b8ec8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50347 · Security Note
• https://ubuntu.com/security/CVE-2022-50251 · Vendor Advisory
• https://git.kernel.org/stable/c/afc898019e7bf18c5eb7a0ac19852fcb1b341b3c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/25f05d762ca5e1c685002a53dd44f68e78ca3feb · Patch