Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52708
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2023-52708

2024-05-2100:00:00
ubuntu.com
ubuntu.com
1
linux kernel
vulnerability
mmc spi
error handling
fix
cve-2023-52708

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: mmc:
mmc_spi: fix error handling in mmc_spi_probe() If mmc_add_host() fails, it
doesn’t need to call mmc_remove_host(), or it will cause null-ptr-deref,
because of deleting a not added device in mmc_remove_host(). To fix this,
goto label ‘fail_glue_init’, if mmc_add_host() fails, and change the label
‘fail_add_host’ to ‘fail_gpiod_request’.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%