CVE-2023-54204

mmc: sunplus: fix return value check of mmc_add_host()

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: sunplus: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value, 1. the memory allocated in mmc_alloc_host() will be leaked 2. null-ptr-deref will happen when calling mmc_remove_host() in remove function spmmc_drv_remove() because deleting not added device.

Fix this by checking the return value of mmc_add_host(). Moreover, I fixed the error handling path of spmmc_drv_probe() to clean up.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4e268fed8b1861616af28f9cfb4eed8ca5d7af6c to before 741a951f41929f39cae70c66d86d0754d3129d0aAffected
  • 4e268fed8b1861616af28f9cfb4eed8ca5d7af6c to before dce6d8f985fa1ef5c2af47f4f86ea65511b78656Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.4.12 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.