PT-2025-53964 · Linux · Linux Kernel

Published 2022-12-07 · Updated 2026-02-24 · CVE-2022-50846

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s mmc subsystem, specifically within the via-sdmmc driver. The mmc add host() function may return an error, and failure to check this return value can lead to two issues. First, memory allocated by mmc alloc host() may be leaked. Second, in the removal process, mmc remove host() could be called on a device that was not properly added, resulting in a kernel crash due to a null pointer dereference in device del(). The issue stems from an improper return value check after calling mmc add host().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2026-04915

CVE-2022-50846

OESA-2026-1276

RHSA-2024:9315

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 994

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50846.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54110 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54218 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50850 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50846 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50846 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50846 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68241 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50846 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71093 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50885 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1276 · Vendor Advisory