CVE-2023-54204
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/12/2025
Last modified:
31/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mmc: sunplus: fix return value check of mmc_add_host()<br />
<br />
mmc_add_host() may return error, if we ignore its return value,<br />
1. the memory allocated in mmc_alloc_host() will be leaked<br />
2. null-ptr-deref will happen when calling mmc_remove_host()<br />
in remove function spmmc_drv_remove() because deleting not<br />
added device.<br />
<br />
Fix this by checking the return value of mmc_add_host(). Moreover,<br />
I fixed the error handling path of spmmc_drv_probe() to clean up.



