CVE-2023-52708

mmc: mmc_spi: fix error handling in mmc_spi_probe()

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mmc: mmc_spi: fix error handling in mmc_spi_probe()

If mmc_add_host() fails, it doesn't need to call mmc_remove_host(),

or it will cause null-ptr-deref, because of deleting a not added

device in mmc_remove_host().

To fix this, goto label 'fail_glue_init', if mmc_add_host() fails,

and change the label 'fail_add_host' to 'fail_gpiod_request'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Published
2024-05-21T15:22Z
EPSS history
Timeline
  • 21 MAY 15:22Z
    mmc: mmc_spi: fix error handling in mmc_spi_probe()
    cvelistv5