Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52708

mmc: mmc_spi: fix error handling in mmc_spi_probe()

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_spi: fix error handling in mmc_spi_probe() If mmc_add_host() fails, it doesn't need to call mmc_remove_host(), or it will cause null-ptr-deref, because of deleting a not added device in mmc_remove_host(). To fix this, goto label 'fail_glue_init', if mmc_add_host() fails, and change the label 'fail_add_host' to 'fail_gpiod_request'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 15a0580ced081a0f7dc2deea8a4812bdc5e9a109 to < e9b488d60f51ae312006e224e03a30a151c28bddaffected
  • 15a0580ced081a0f7dc2deea8a4812bdc5e9a109 to < 0b3edcb24bd81b3b2e3dac89f4733bfd47d283beaffected
  • 15a0580ced081a0f7dc2deea8a4812bdc5e9a109 to < ecad2fafd424ffdc203b2748ded0b37e4bbecef3affected
  • 15a0580ced081a0f7dc2deea8a4812bdc5e9a109 to < 82645bf4ed02abe930a659c5fe16d593a6dbd93faffected
  • 15a0580ced081a0f7dc2deea8a4812bdc5e9a109 to < cf4c9d2ac1e42c7d18b921bec39486896645b714affected

Linux Linux

Default version status: affected

  • 2.6.24affected
  • 0 to < 2.6.24unaffected
  • 5.4.232 to ≤ 5.4.*unaffected
  • 5.10.169 to ≤ 5.10.*unaffected
  • 5.15.95 to ≤ 5.15.*unaffected
  • 6.1.13 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References