Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-50640— mmc: core: Fix kernel panic when remove non-standard SDIO card

EPSS 0.03% · P9

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinux6f51be3d37dff73cf8db771df4169f4c2f1cbf66< b8b2965932e702b21e335ff30e1bb550f5a23b6faffected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< b3275dde570b6420106a715bb58a0af041b94d95affected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< 1fb79478695d92bab1c120ad3dad05252b02a29daffected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< 7a09c64b7da0abdec3919812e3d93ecc44069ed0affected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< 8bf037279b5869ae9331c42bb1527d2680ebba96affected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< 1e8cd93ae536581562bab4e1d8c5315bbc2548bfaffected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< 66d461a92f32b6995b630625d350259b6b1f961baffected
6f51be3d37dff73cf8db771df4169f4c2f1cbf66< 9972e6b404884adae9eec7463e30d9b3c9a70b18affected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-50640

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mmc: core: Fix kernel panic when remove non-standard SDIO card
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Fix kernel panic when remove non-standard SDIO card SDIO tuple is only allocated for standard SDIO card, especially it causes memory corruption issues when the non-standard SDIO card has removed, which is because the card device's reference counter does not increase for it at sdio_init_func(), but all SDIO card device reference counter gets decreased at sdio_release_func().
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于内存损坏,可能导致系统不稳定。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 6f51be3d37dff73cf8db771df4169f4c2f1cbf66 ~ b8b2965932e702b21e335ff30e1bb550f5a23b6f -
LinuxLinux 2.6.36 -

II. Public POCs for CVE-2022-50640

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50640

登录查看更多情报信息。

Same Patch Batch · Linux · 2025-12-09 · 152 CVEs total

CVE-2023-53827Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
CVE-2023-53846f2fs: fix to do sanity check on direct node in truncate_dnode()
CVE-2023-53845nilfs2: fix infinite loop in nilfs_mdt_get_block()
CVE-2023-53844drm/ttm: Don't leak a resource on swapout move error
CVE-2023-53843net: openvswitch: reject negative ifindex
CVE-2023-53842ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
CVE-2023-53841devlink: report devlink_port_type_warn source device
CVE-2023-53840usb: early: xhci-dbc: Fix a potential out-of-bound memory access
CVE-2023-53839dccp: fix data-race around dp->dccps_mss_cache
CVE-2023-53838f2fs: synchronize atomic write aborts
CVE-2023-53837drm/msm: fix NULL-deref on snapshot tear down
CVE-2023-53836bpf, sockmap: Fix skb refcnt race after locking changes
CVE-2023-53834iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
CVE-2023-53833drm/i915: Fix NULL ptr deref by checking new_crtc_state
CVE-2023-53832md/raid10: fix null-ptr-deref in raid10_sync_request
CVE-2023-53831net: read sk->sk_family once in sk_mc_loop()
CVE-2023-53830platform/x86: think-lmi: Fix memory leak when showing current settings
CVE-2023-53829f2fs: flush inode if atomic file is aborted
CVE-2023-53828Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
CVE-2022-50675arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored

Showing top 20 of 152 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2022-50640

No comments yet


Leave a comment