Not yet scoredPublished Dec 30, 2025

CVE-2022-50886mmc: toshsd: fix return value check of mmc_add_host()

Updated under an hour ago (Oct 27, 2026, 10:20 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path. So fix this by checking the return value and goto error path which will call mmc_free_host(), besides, free_irq() also needs be called.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before 34ae492f8d172f0bd193c24cad588b35419ea47a; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before 3329e7b7132ca727263fb0ee214cf52cc6dcaaad; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before 4f6cb1c685f9e20a4a9fa565e442f5af4dad70ff; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before 3dbb69a0242c31ea4c9eee22b1c41b515fe509a0; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before aabbedcb6c9a72d12d35dc672e83f0c8064d8a61; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before 6444079767b68b1fbed0e7668081146e80dcb719; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before 647e370dd0ef7e212d8d014bda748e461eab2e8c; from a5eb8bbd66ccf9f169419f9652544aec771b7c57 before bfd77b194c94aefbde4efc30ddf8607dd9244672; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/34ae492f8d172f0bd193c24cad588b35419ea47a
https://git.kernel.org/stable/c/3329e7b7132ca727263fb0ee214cf52cc6dcaaad
https://git.kernel.org/stable/c/4f6cb1c685f9e20a4a9fa565e442f5af4dad70ff
https://git.kernel.org/stable/c/3dbb69a0242c31ea4c9eee22b1c41b515fe509a0
https://git.kernel.org/stable/c/aabbedcb6c9a72d12d35dc672e83f0c8064d8a61
https://git.kernel.org/stable/c/6444079767b68b1fbed0e7668081146e80dcb719
https://git.kernel.org/stable/c/647e370dd0ef7e212d8d014bda748e461eab2e8c
https://git.kernel.org/stable/c/bfd77b194c94aefbde4efc30ddf8607dd9244672
https://git.kernel.org/stable/c/f670744a316ea983113a65313dcd387b5a992444

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.