PT-2025-49459 · Linux · Linux Kernel

Published 2025-12-08 · Updated 2026-02-24 · CVE-2022-50618

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where the mmc add host() function's return value is not properly checked. If mmc add host() returns an error, the allocated memory in mmc alloc host() is leaked, and a subsequent call to mmc remove host() in the remove path can cause a kernel crash due to a null-pointer dereference in device del(). The issue occurs because the device is not added correctly, but the removal process attempts to delete it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50618

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 975

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50618.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50618 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50618 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50618 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50618 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50618 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50618 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50618 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note
• https://bugzilla.suse.com/1255007 · Note