{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-52730","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2024-05-21T15:19:24.232Z","datePublished":"2024-05-21T15:22:56.633Z","dateUpdated":"2025-05-04T07:42:06.175Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2025-05-04T07:42:06.175Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdio: fix possible resource leaks in some error paths\n\nIf sdio_add_func() or sdio_init_func() fails, sdio_remove_func() can\nnot release the resources, because the sdio function is not presented\nin these two cases, it won't call of_node_put() or put_device().\n\nTo fix these leaks, make sdio_func_present() only control whether\ndevice_del() needs to be called or not, then always call of_node_put()\nand put_device().\n\nIn error case in sdio_init_func(), the reference of 'card->dev' is\nnot get, to avoid redundant put in sdio_free_func_cis(), move the\nget_device() to sdio_alloc_func() and put_device() to sdio_release_func(),\nit can keep the get/put function be balanced.\n\nWithout this patch, while doing fault inject test, it can get the\nfollowing leak reports, after this fix, the leak is gone.\n\nunreferenced object 0xffff888112514000 (size 2048):\n  comm \"kworker/3:2\", pid 65, jiffies 4294741614 (age 124.774s)\n  hex dump (first 32 bytes):\n    00 e0 6f 12 81 88 ff ff 60 58 8d 06 81 88 ff ff  ..o.....`X......\n    10 40 51 12 81 88 ff ff 10 40 51 12 81 88 ff ff  .@Q......@Q.....\n  backtrace:\n    [<000000009e5931da>] kmalloc_trace+0x21/0x110\n    [<000000002f839ccb>] mmc_alloc_card+0x38/0xb0 [mmc_core]\n    [<0000000004adcbf6>] mmc_sdio_init_card+0xde/0x170 [mmc_core]\n    [<000000007538fea0>] mmc_attach_sdio+0xcb/0x1b0 [mmc_core]\n    [<00000000d4fdeba7>] mmc_rescan+0x54a/0x640 [mmc_core]\n\nunreferenced object 0xffff888112511000 (size 2048):\n  comm \"kworker/3:2\", pid 65, jiffies 4294741623 (age 124.766s)\n  hex dump (first 32 bytes):\n    00 40 51 12 81 88 ff ff e0 58 8d 06 81 88 ff ff  .@Q......X......\n    10 10 51 12 81 88 ff ff 10 10 51 12 81 88 ff ff  ..Q.......Q.....\n  backtrace:\n    [<000000009e5931da>] kmalloc_trace+0x21/0x110\n    [<00000000fcbe706c>] sdio_alloc_func+0x35/0x100 [mmc_core]\n    [<00000000c68f4b50>] mmc_attach_sdio.cold.18+0xb1/0x395 [mmc_core]\n    [<00000000d4fdeba7>] mmc_rescan+0x54a/0x640 [mmc_core]"}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/core/sdio_bus.c","drivers/mmc/core/sdio_cis.c"],"versions":[{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"92ff03c2563c9b57a027c744750f3b7d2f261c58","status":"affected","versionType":"git"},{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"5c7858adada31dbed042448cff6997dd6efc472a","status":"affected","versionType":"git"},{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"761db46b29b496946046d8cb33c7ea6de6bef36e","status":"affected","versionType":"git"},{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"30716d9f0fa1766e522cf24c8a456244e4fc9931","status":"affected","versionType":"git"},{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"1e06cf04239e202248c8fa356bf11449dc73cfbd","status":"affected","versionType":"git"},{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"f855d31bb38d663c3ba672345d7cce9324ba3b72","status":"affected","versionType":"git"},{"version":"3d10a1ba0d37c8f5fd5afcdda00613fbb8a90bf5","lessThan":"605d9fb9556f8f5fb4566f4df1480f280f308ded","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/core/sdio_bus.c","drivers/mmc/core/sdio_cis.c"],"versions":[{"version":"2.6.33","status":"affected"},{"version":"0","lessThan":"2.6.33","status":"unaffected","versionType":"semver"},{"version":"4.14.306","lessThanOrEqual":"4.14.*","status":"unaffected","versionType":"semver"},{"version":"4.19.273","lessThanOrEqual":"4.19.*","status":"unaffected","versionType":"semver"},{"version":"5.4.232","lessThanOrEqual":"5.4.*","status":"unaffected","versionType":"semver"},{"version":"5.10.169","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.95","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.13","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"4.14.306"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"4.19.273"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.4.232"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.10.169"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"5.15.95"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"6.1.13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"6.2"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/92ff03c2563c9b57a027c744750f3b7d2f261c58"},{"url":"https://git.kernel.org/stable/c/5c7858adada31dbed042448cff6997dd6efc472a"},{"url":"https://git.kernel.org/stable/c/761db46b29b496946046d8cb33c7ea6de6bef36e"},{"url":"https://git.kernel.org/stable/c/30716d9f0fa1766e522cf24c8a456244e4fc9931"},{"url":"https://git.kernel.org/stable/c/1e06cf04239e202248c8fa356bf11449dc73cfbd"},{"url":"https://git.kernel.org/stable/c/f855d31bb38d663c3ba672345d7cce9324ba3b72"},{"url":"https://git.kernel.org/stable/c/605d9fb9556f8f5fb4566f4df1480f280f308ded"}],"title":"mmc: sdio: fix possible resource leaks in some error paths","x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T23:11:35.273Z"},"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/92ff03c2563c9b57a027c744750f3b7d2f261c58","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/5c7858adada31dbed042448cff6997dd6efc472a","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/761db46b29b496946046d8cb33c7ea6de6bef36e","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/30716d9f0fa1766e522cf24c8a456244e4fc9931","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/1e06cf04239e202248c8fa356bf11449dc73cfbd","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/f855d31bb38d663c3ba672345d7cce9324ba3b72","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/605d9fb9556f8f5fb4566f4df1480f280f308ded","tags":["x_transferred"]}]},{"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-52730","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-09-10T15:37:41.339440Z"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-09-11T17:32:56.604Z"}}]}}