CVE-2022-50353
BaseFortify
Publication date: 2025-09-17
Last updated on: 2025-12-10
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 3.8 (inc) to 4.14.303 (exc) |
| linux | linux_kernel | From 4.15 (inc) to 4.19.270 (exc) |
| linux | linux_kernel | From 4.20 (inc) to 5.4.229 (exc) |
| linux | linux_kernel | From 5.5 (inc) to 5.10.163 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.86 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.0.16 (exc) |
| linux | linux_kernel | From 6.1 (inc) to 6.1.2 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's mmc subsystem, specifically in the wmt-sdmmc driver. The function mmc_add_host() may return an error, but if its return value is ignored, the memory allocated by mmc_alloc_host() will be leaked. This can lead to a kernel crash because the system attempts to delete a device that was never successfully added. The fix involves properly checking the return value of mmc_add_host() and handling errors by freeing allocated memory and disabling the clock as needed.
How can this vulnerability impact me? :
If this vulnerability is exploited or triggered, it can cause a kernel crash due to memory leaks and improper device removal. This can lead to system instability, potential denial of service, and unexpected reboots or downtime on affected Linux systems using the vulnerable driver.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability is fixed by ensuring the return value of mmc_add_host() is properly checked to avoid memory leaks and kernel crashes. Immediate mitigation involves applying the patch that includes this fix, which checks the return value and calls mmc_free_host() and clk_disable_unprepare() as needed. Until the patch is applied, avoid using affected versions of the Linux kernel or update to a fixed version.