Linux Kernel MMC Sunplus Driver Return Value Check Vulnerability

A vulnerability exists in the Linux kernel's MMC Sunplus driver, specifically in the handling of the return value from the 'mmc_add_host()' function. This oversight can lead to two issues: first, a memory leak from unfreed allocations in 'mmc_alloc_host()'; second, a null pointer dereference when 'mmc_remove_host()' is called in the 'spmmc_drv_remove()' function', attempting to remove a device that was not properly added. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can cause a memory leak and a null pointer dereference, leading to a crash when the driver is removed.

Remediation

Users can apply the latest patch available in the Linux kernel stable tree, which addresses the return value check and error handling in the Sunplus MMC driver.