CVE-2022-50640mmc: core: Fix kernel panic when remove non-standard SDIO card
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Fix kernel panic when remove non-standard SDIO card SDIO tuple is only allocated for standard SDIO card, especially it causes memory corruption issues when the non-standard SDIO card has removed, which is because the card device's reference counter does not increase for it at sdio_init_func(), but all SDIO card device reference counter gets decreased at sdio_release_func().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 before b8b2965932e702b21e335ff30e1bb550f5a23b6f; from 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 before b3275dde570b6420106a715bb58a0af041b94d95; 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 builds before 1fb79478695d92bab1c120ad3dad05252b02a29d; from 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 before 7a09c64b7da0abdec3919812e3d93ecc44069ed0; from 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 before 8bf037279b5869ae9331c42bb1527d2680ebba96; 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 builds before 1e8cd93ae536581562bab4e1d8c5315bbc2548bf; from 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 before 66d461a92f32b6995b630625d350259b6b1f961b; from 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 before 9972e6b404884adae9eec7463e30d9b3c9a70b18 | CNA record |
References
- https://git.kernel.org/stable/c/b8b2965932e702b21e335ff30e1bb550f5a23b6f
- https://git.kernel.org/stable/c/b3275dde570b6420106a715bb58a0af041b94d95
- https://git.kernel.org/stable/c/1fb79478695d92bab1c120ad3dad05252b02a29d
- https://git.kernel.org/stable/c/7a09c64b7da0abdec3919812e3d93ecc44069ed0
- https://git.kernel.org/stable/c/8bf037279b5869ae9331c42bb1527d2680ebba96
- https://git.kernel.org/stable/c/1e8cd93ae536581562bab4e1d8c5315bbc2548bf
- https://git.kernel.org/stable/c/66d461a92f32b6995b630625d350259b6b1f961b
- https://git.kernel.org/stable/c/9972e6b404884adae9eec7463e30d9b3c9a70b18
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.