CVE-2024-39484

mmc: davinci: Don't strip remove function when driver is builtin

published July 5, 2024

CVSS
—
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mmc: davinci: Don't strip remove function when driver is builtin

Using __exit for the remove function results in the remove callback being

discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g.

using sysfs or hotplug), the driver is just removed without the cleanup

being performed. This results in resource leaks. Fix it by compiling in the

remove callback unconditionally.

This also fixes a W=1 modpost warning:

WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in

reference: davinci_mmcsd_driver+0x10 (section: .data) ->

davinci_mmcsd_remove (section: .exit.text)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2024-07-05T06:55Z
EPSS history
Timeline
  • 05 JUL 06:55Z
    mmc: davinci: Don't strip remove function when driver is builtin
    cvelistv5