CVE-2023-54204
Unknown Unknown - Not Provided
Null Pointer Dereference in Linux Kernel MMC Sunplus Driver

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mmc: sunplus: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, 1. the memory allocated in mmc_alloc_host() will be leaked 2. null-ptr-deref will happen when calling mmc_remove_host() in remove function spmmc_drv_remove() because deleting not added device. Fix this by checking the return value of mmc_add_host(). Moreover, I fixed the error handling path of spmmc_drv_probe() to clean up.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-06-16
AI Q&A
2025-12-30
EPSS Evaluated
2026-06-15
NVD
CVE-2023-54204
EUVD
EUVD-2023-60437
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
sunplus mmc *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's sunplus MMC driver. The function mmc_add_host() may return an error, but if this return value is ignored, it can cause two issues: memory allocated by mmc_alloc_host() will be leaked, and a null pointer dereference can occur when mmc_remove_host() is called during device removal. This happens because the driver attempts to delete a device that was never successfully added. The fix involves properly checking the return value of mmc_add_host() and improving error handling in the spmmc_drv_probe() function to clean up correctly.

Impact Analysis

The impact of this vulnerability includes potential memory leaks and null pointer dereferences in the Linux kernel's sunplus MMC driver. Memory leaks can degrade system performance or stability over time, while null pointer dereferences can cause kernel crashes or system instability, potentially leading to denial of service conditions.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version that includes the fix for the mmc: sunplus driver, which properly checks the return value of mmc_add_host() and handles errors correctly in spmmc_drv_probe().

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54204. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart