In the Linux kernel, the following vulnerability has been resolved:
mmc: omap_hsmmc: fix return value check of mmc_add_host()
mmc_add_host() may return error, if we ignore its return value,
it will lead two issues:
1. The memory that allocated in mmc_alloc_host() is leaked.
2. In the remove() path, mmc_remove_host() will be called to
delete device, but it's not added yet, it will lead a kernel
crash because of null-ptr-deref in device_del().
Fix this by checking the return value and goto error path wihch
will call mmc_free_host().
from a45c6cb816474cefe56059fce422a9bdcd77e0dc before f153c9e15f8961bdf38707853e15b42ea7c691d9; from a45c6cb816474cefe56059fce422a9bdcd77e0dc before fb3d596267a98813a7a8206097d8d46c98505a0d; from a45c6cb816474cefe56059fce422a9bdcd77e0dc before 62005dfcc396424db3337a1dc3ab49623537f5e5; from a45c6cb816474cefe56059fce422a9bdcd77e0dc before a5f8a4583280a76e50329b910e91ef1dea1e6c79; from a45c6cb816474cefe56059fce422a9bdcd77e0dc before 4e1dc24bcfc8257f24c0663badec7e4f3ae80558; from a45c6cb816474cefe56059fce422a9bdcd77e0dc before a525cad241c339ca00bf7ebf03c5180f2a9b767c
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
