Memory Leak Vulnerability in Linux Kernel Affecting Device Management

CVE-2022-50886

What is CVE-2022-50886?

A vulnerability exists in the Linux kernel related to the mmc_add_host() function, where failure to check its return value can lead to a memory leak. If this oversight is ignored, it can cause the system to crash when trying to remove a device that was not successfully added. The vulnerability has been addressed by ensuring that the return value of mmc_add_host() is properly checked. In addition, corrective measures include releasing allocated resources and interrupt lines to prevent data loss and improve system stability.

References