CVE-2024-39484

CVSS v3.1 5.5 (Medium)
55% Progress
EPSS 0.04 % (5th)
0.04% Progress
Affected Products 1
Advisories 18
NVD Status Analyzed

In the Linux kernel, the following vulnerability has been resolved:

mmc: davinci: Don't strip remove function when driver is builtin

Using __exit for the remove function results in the remove callback being
discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g.
using sysfs or hotplug), the driver is just removed without the cleanup
being performed. This results in resource leaks. Fix it by compiling in the
remove callback unconditionally.

This also fixes a W=1 modpost warning:

WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in
reference: davinci_mmcsd_driver+0x10 (section: .data) ->
davinci_mmcsd_remove (section: .exit.text)

Weaknesses
CWE-770
Allocation of Resources Without Limits or Throttling
CVE Status
PUBLISHED
NVD Status
Analyzed
CNA
kernel.org
Published Date
2024-07-05 07:15:10
(2 months ago)
Updated Date
2024-07-08 18:01:56
(2 months ago)

Affected Products

Loading...
Loading...
Loading...

Configuration #1

    CPE23 From Up To
  Linux Kernel prior 2.6.33 version cpe:2.3:o:linux:linux_kernel < 2.6.33
  Linux Kernel from 5.10 version and prior 5.10.221 version cpe:2.3:o:linux:linux_kernel >= 5.10 < 5.10.221
  Linux Kernel from 5.15 version and prior 5.15.162 version cpe:2.3:o:linux:linux_kernel >= 5.15 < 5.15.162
  Linux Kernel from 6.1 version and prior 6.1.95 version cpe:2.3:o:linux:linux_kernel >= 6.1 < 6.1.95
  Linux Kernel from 6.6 version and prior 6.6.34 version cpe:2.3:o:linux:linux_kernel >= 6.6 < 6.6.34
  Linux Kernel from 6.9 version and prior 6.9.5 version cpe:2.3:o:linux:linux_kernel >= 6.9 < 6.9.5
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...