References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

In the Linux kernel, the following vulnerability has been resolved:

mmc: omap_hsmmc: fix return value check of mmc_add_host()

mmc_add_host() may return error, if we ignore its return value,
it will lead two issues:
1. The memory that allocated in mmc_alloc_host() is leaked.
2. In the remove() path, mmc_remove_host() will be called to
   delete device, but it's not added yet, it will lead a kernel
   crash because of null-ptr-deref in device_del().

Fix this by checking the return value and goto error path wihch
will call mmc_free_host().

https://git.kernel.org/stable/c/4e1dc24bcfc8257f24c0663badec7e4f3ae80558

https://git.kernel.org/stable/c/62005dfcc396424db3337a1dc3ab49623537f5e5

https://git.kernel.org/stable/c/a525cad241c339ca00bf7ebf03c5180f2a9b767c

https://git.kernel.org/stable/c/a5f8a4583280a76e50329b910e91ef1dea1e6c79

https://git.kernel.org/stable/c/f153c9e15f8961bdf38707853e15b42ea7c691d9

https://git.kernel.org/stable/c/fb3d596267a98813a7a8206097d8d46c98505a0d