PT-2025-49633 · Atmel-Mci+1 · Atmel-Mci+1
Published
2025-12-09
·
Updated
2026-02-24
·
CVE-2022-50653
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s mmc subsystem, specifically within the atmel-mci driver. The
mmc add host() function may return an error, and failure to check this return value can lead to two issues. First, memory allocated by mmc alloc host() may be leaked. Second, in the removal process, mmc remove host() could be called on a device that was not properly added, resulting in a kernel crash due to a null pointer dereference in device del(). The issue stems from an inadequate check of the return value of the mmc add host() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Atmel-Mci