CVE-2022-50640mmc: core: Fix kernel panic when remove non-standard SDIO card
- —Not scoredno CVSS score yet
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Fix kernel panic when remove non-standard SDIO card SDIO tuple is only allocated for standard SDIO card, especially it causes memory corruption issues when the non-standard SDIO card has removed, which is because the card device's reference counter does not increase for it at sdio_init_func(), but all SDIO card device reference counter gets decreased at sdio_release_func().
Timeline
ID reserved
By Linux
- 1 day later
· 1 day later
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < b8b2965932e702b21e335ff30e1bb550f5a23b6f
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < b3275dde570b6420106a715bb58a0af041b94d95
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < 1fb79478695d92bab1c120ad3dad05252b02a29d
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < 7a09c64b7da0abdec3919812e3d93ecc44069ed0
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < 8bf037279b5869ae9331c42bb1527d2680ebba96
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < 1e8cd93ae536581562bab4e1d8c5315bbc2548bf
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < 66d461a92f32b6995b630625d350259b6b1f961b
- affected 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 – < 9972e6b404884adae9eec7463e30d9b3c9a70b18
- affected 2.6.36
- unaffected < 2.6.36
- unaffected 4.9.332 – ≤ 4.9.*
- unaffected 4.14.298 – ≤ 4.14.*
- unaffected 4.19.264 – ≤ 4.19.*
- unaffected 5.4.223 – ≤ 5.4.*
- unaffected 5.10.153 – ≤ 5.10.*
- unaffected 5.15.77 – ≤ 5.15.*
- unaffected 6.0.7 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References
References8
- https://git.kernel.org/stable/c/b8b2965932e702b21e335ff30e1bb550f5a23b6f (opens in a new tab)
- https://git.kernel.org/stable/c/b3275dde570b6420106a715bb58a0af041b94d95 (opens in a new tab)
- https://git.kernel.org/stable/c/1fb79478695d92bab1c120ad3dad05252b02a29d (opens in a new tab)
- https://git.kernel.org/stable/c/7a09c64b7da0abdec3919812e3d93ecc44069ed0 (opens in a new tab)
- https://git.kernel.org/stable/c/8bf037279b5869ae9331c42bb1527d2680ebba96 (opens in a new tab)
- https://git.kernel.org/stable/c/1e8cd93ae536581562bab4e1d8c5315bbc2548bf (opens in a new tab)
- https://git.kernel.org/stable/c/66d461a92f32b6995b630625d350259b6b1f961b (opens in a new tab)
- https://git.kernel.org/stable/c/9972e6b404884adae9eec7463e30d9b3c9a70b18 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2022-55716 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-50640)Record last updated .