Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-50430— mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING

AI Predicted 3.3 Difficulty: Easy EPSS 0.15% · P5

Possible ATT&CK Techniques 1AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 20

VendorProductVersion RangeStatus
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89< 32d5af247d4de6a35769ca1d027480a37c28fd0caffected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< 48e91ae755f027d817ed7e51db9963ddb7081946affected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< 6f7258c6f66692b3760c37ddd4bc9e02bb290da7affected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< f1c08947ab0538b07a0bd9d6edadfb5185f56344affected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< b51d5fed9f53e07ce9fc65efb4ff1abe021a4c16affected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< d58289fc77f8c1f879c818bddaf7ef524c73658baffected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< d15946ef98f4ccdca961b76f90d9b53c454d590eaffected
88095e7b473a3d9ec3b9c60429576e9cbd327c89< ba2e7d07dd06e646a72ba906a89fdc1cca7ea560affected
… +12 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-50430

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING vub300_enable_sdio_irq() works with mutex and need TASK_RUNNING here. Ensure that we mark current as TASK_RUNNING for sleepable context. [ 77.554641] do not call blocking ops when !TASK_RUNNING; state=1 set at [<ffffffff92a72c1d>] sdio_irq_thread+0x17d/0x5b0 [ 77.554652] WARNING: CPU: 2 PID: 1983 at kernel/sched/core.c:9813 __might_sleep+0x116/0x160 [ 77.554905] CPU: 2 PID: 1983 Comm: ksdioirqd/mmc1 Tainted: G OE 6.1.0-rc5 #1 [ 77.554910] Hardware name: Intel(R) Client Systems NUC8i7BEH/NUC8BEB, BIOS BECFL357.86A.0081.2020.0504.1834 05/04/2020 [ 77.554912] RIP: 0010:__might_sleep+0x116/0x160 [ 77.554920] RSP: 0018:ffff888107b7fdb8 EFLAGS: 00010282 [ 77.554923] RAX: 0000000000000000 RBX: ffff888118c1b740 RCX: 0000000000000000 [ 77.554926] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffed1020f6ffa9 [ 77.554928] RBP: ffff888107b7fde0 R08: 0000000000000001 R09: ffffed1043ea60ba [ 77.554930] R10: ffff88821f5305cb R11: ffffed1043ea60b9 R12: ffffffff93aa3a60 [ 77.554932] R13: 000000000000011b R14: 7fffffffffffffff R15: ffffffffc0558660 [ 77.554934] FS: 0000000000000000(0000) GS:ffff88821f500000(0000) knlGS:0000000000000000 [ 77.554937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.554939] CR2: 00007f8a44010d68 CR3: 000000024421a003 CR4: 00000000003706e0 [ 77.554942] Call Trace: [ 77.554944] <TASK> [ 77.554952] mutex_lock+0x78/0xf0 [ 77.554973] vub300_enable_sdio_irq+0x103/0x3c0 [vub300] [ 77.554981] sdio_irq_thread+0x25c/0x5b0 [ 77.555006] kthread+0x2b8/0x370 [ 77.555017] ret_from_fork+0x1f/0x30 [ 77.555023] </TASK> [ 77.555025] ---[ end trace 0000000000000000 ]---
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于vub300_enable_sdio_irq函数在非TASK_RUNNING状态下调用阻塞操作，可能导致内核警告和系统不稳定。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 88095e7b473a3d9ec3b9c60429576e9cbd327c89 ~ 32d5af247d4de6a35769ca1d027480a37c28fd0c -
LinuxLinux 3.0 -

II. Public POCs for CVE-2022-50430

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50430

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-10-01 · 169 CVEs total

CVE-2023-535179.8 CRITICALtipc: do not update mtu if msg_max is too small in mtu negotiation
CVE-2025-399198.8 HIGHwifi: mt76: mt7996: add missing check for rx wcid entries
CVE-2025-399188.8 HIGHwifi: mt76: fix linked list corruption
CVE-2023-534548.8 HIGHHID: multitouch: Correct devm device reference for hidinput input_dev name
CVE-2022-504428.4 HIGHfs/ntfs3: Validate buffer length while parsing index
CVE-2023-534938.4 HIGHaccel/qaic: tighten bounds checking in decode_message()
CVE-2023-534927.8 HIGHnetfilter: nf_tables: do not ignore genmask when looking up chain by id
CVE-2025-399247.8 HIGHerofs: fix invalid algorithm for encoded extents
CVE-2023-535107.8 HIGHscsi: ufs: core: Fix handling of lrbp->cmd
CVE-2025-399277.8 HIGHceph: fix race condition validating r_parent before applying state
CVE-2023-535067.8 HIGHudf: Do not bother merging very long extents
CVE-2022-504217.8 HIGHrpmsg: char: Avoid double destroy of default endpoint
CVE-2022-504237.8 HIGHACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
CVE-2023-535047.8 HIGHRDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF
CVE-2023-534957.8 HIGHnet: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
CVE-2023-534947.8 HIGHcrypto: xts - Handle EBUSY correctly
CVE-2022-504377.8 HIGHdrm/msm/hdmi: fix memory corruption with too many bridges
CVE-2023-534787.8 HIGHtracing/synthetic: Fix races on freeing last_cmd
CVE-2023-534817.8 HIGHubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
CVE-2023-534867.8 HIGHfs/ntfs3: Enhance the attribute size check

Showing top 20 of 169 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-50430

No comments yet

Leave a comment