CVE-2024-39484

mmc: davinci: Don't strip remove function when driver is builtin

State: Published
Severity: Not scored
Published: Jul 5, 2024
Updated: May 11, 2026
Reserved: Jun 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: davinci: Don't strip remove function when driver is builtin

Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally.

This also fixes a W=1 modpost warning:

WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 6ff7cfa02baabec907f6f29ea76634e6256d2ec4Affected b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before aea35157bb9b825faa0432bd0f7fbea37ff39aa1Affected b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 5ee241f72edc6dce5051a5f100eab6cc019d873eAffected b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 7590da4c04dd4aa9c262da0231e978263861c6ebAffected b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 1d5ed0efe51d36b9ae9b64f133bf41cdbf56f584Affected b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 55c421b364482b61c4c45313a535e61ed5ae4ea3Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.95 through 6.1.Not affected 6.6.34 through 6.6.Not affected 6.9.5 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 6ff7cfa02baabec907f6f29ea76634e6256d2ec4Affected
b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before aea35157bb9b825faa0432bd0f7fbea37ff39aa1Affected
b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 5ee241f72edc6dce5051a5f100eab6cc019d873eAffected
b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 7590da4c04dd4aa9c262da0231e978263861c6ebAffected
b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 1d5ed0efe51d36b9ae9b64f133bf41cdbf56f584Affected
b4cff4549b7a8c5fc8b88e3493b6287555f0512c to before 55c421b364482b61c4c45313a535e61ed5ae4ea3Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.95 through 6.1.*Not affected
6.6.34 through 6.6.*Not affected
6.9.5 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.