Not yet scoredPublished Dec 24, 2025

CVE-2022-50769mmc: mxcmmc: fix return value check of mmc_add_host()

Updated under an hour ago (Oct 27, 2026, 12:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d96be879ff469759af6d7fcebdb66237c18da6f8 before 5f35c038c9f4d258b3cf77885a2730f1417d63e7; from d96be879ff469759af6d7fcebdb66237c18da6f8 before 1cf0c1e58738b97e2de207846105b6a5d46622ee; from d96be879ff469759af6d7fcebdb66237c18da6f8 before b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89; from d96be879ff469759af6d7fcebdb66237c18da6f8 before 32eb502c972dfc34413c9147418b3d94d870c2b8; from d96be879ff469759af6d7fcebdb66237c18da6f8 before 3904eb97bb78fdca3e16d30a38ce5697b9686110; from d96be879ff469759af6d7fcebdb66237c18da6f8 before 2d496050ded83b13b16f05e1fc0329b0210d2493; from d96be879ff469759af6d7fcebdb66237c18da6f8 before d37474ab9a79149075f0823315c6d45dd983a78c; from d96be879ff469759af6d7fcebdb66237c18da6f8 before d2ead18bc7cc166220cab5a744a05c5b69431a12; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/5f35c038c9f4d258b3cf77885a2730f1417d63e7
https://git.kernel.org/stable/c/1cf0c1e58738b97e2de207846105b6a5d46622ee
https://git.kernel.org/stable/c/b8bdb3fd13d5cd1e86d22fd3f803a742fd88af89
https://git.kernel.org/stable/c/32eb502c972dfc34413c9147418b3d94d870c2b8
https://git.kernel.org/stable/c/3904eb97bb78fdca3e16d30a38ce5697b9686110
https://git.kernel.org/stable/c/2d496050ded83b13b16f05e1fc0329b0210d2493
https://git.kernel.org/stable/c/d37474ab9a79149075f0823315c6d45dd983a78c
https://git.kernel.org/stable/c/d2ead18bc7cc166220cab5a744a05c5b69431a12
https://git.kernel.org/stable/c/cde600af7b413c9fe03e85c58c4279df90e91d13

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.