PT-2025-38163 · Linux+2 · Linux Kernel+2
Published
2022-12-07
·
Updated
2025-10-23
·
CVE-2022-50353
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The
mmc add host() function may return an error, and failing to check this return value can lead to a memory leak. This memory leak occurs because memory allocated in mmc alloc host() is not freed. Subsequently, attempting to delete a device that was not properly added can cause a kernel crash. The issue is resolved by checking the return value of mmc add host() and including a call to mmc free host() in the error path, as well as clk disable unprepare().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Unchecked Return Value
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse