Log in Start free

Vulnerability · Published Jul 5, 2024 · Assigned by Linux

CVE-2024-39484mmc: davinci: Don't strip remove function when driver is builtin

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 86.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.99-1DSA-5731-1
Debian:12linux6.1.99-1DEBIAN-CVE-2024-39484
Debian:13linux6.9.7-1DEBIAN-CVE-2024-39484
Debian:14linux6.9.7-1DEBIAN-CVE-2024-39484
Ubuntu:22.04:LTSlinux5.15.0-119.129USN-6974-1
Ubuntu:22.04:LTSlinux5.15.0-119.129UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux6.8.0-41.41UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux6.8.0-41.41USN-6975-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-aws5.15.0-1068.74USN-6974-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1068.74UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-aws6.8.0-1014.15UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-aws6.8.0-1014.15USN-6975-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1014.15~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure5.15.0-1071.80UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure5.15.0-1071.80USN-6974-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1013.15UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-azure6.8.0-1013.15USN-6975-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1013.15~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1071.80.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1071.80.1USN-6974-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-gcp5.15.0-1067.75USN-6974-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1067.75UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-gcp6.8.0-1013.14UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-gcp6.8.0-1013.14USN-6975-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1013.14~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-gke5.15.0-1065.71UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-gke5.15.0-1065.71USN-6974-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1009.12UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-gke6.8.0-1009.12USN-6975-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1051.58USN-6974-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1051.58UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-45.45~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-ibm5.15.0-1061.64USN-6974-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1061.64UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-ibm6.8.0-1011.11USN-6975-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1011.11UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1011.11~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1063.69UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1063.69USN-6974-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1065.70USN-6974-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1065.70UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-119.129USN-6974-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-119.129UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-41.41.1UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-41.41.1USN-6975-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-44.44.1~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1063.64USN-6974-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1063.64UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1012.12USN-6975-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1012.12UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1012.12~22.04.1USN-6975-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1012.12~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1012.12.1UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1012.12.1USN-6975-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1028.28UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1016.16UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1011.11USN-6975-1
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1011.11UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oracle5.15.0-1066.72UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oracle5.15.0-1066.72USN-6974-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1011.11USN-6975-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1011.11UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1011.11~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-raspi5.15.0-1061.64USN-6974-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1061.64UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-raspi6.8.0-1010.11UBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-raspi6.8.0-1010.11USN-6975-1
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-39484
Ubuntu:24.04:LTSlinux-riscv6.8.0-41.41.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-41.41.1~22.04.1UBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-39484
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1035.39UBUNTU-CVE-2024-39484

Affected products (as reported)

VendorProductVersions
Linux Linux b4cff4549b7a8c5fc8b88e3493b6287555f0512c – before 6ff7cfa02baabec907f6f29ea76634e6256d2ec4b4cff4549b7a8c5fc8b88e3493b6287555f0512c – before aea35157bb9b825faa0432bd0f7fbea37ff39aa1b4cff4549b7a8c5fc8b88e3493b6287555f0512c – before 5ee241f72edc6dce5051a5f100eab6cc019d873eb4cff4549b7a8c5fc8b88e3493b6287555f0512c – before 7590da4c04dd4aa9c262da0231e978263861c6ebb4cff4549b7a8c5fc8b88e3493b6287555f0512c – before 1d5ed0efe51d36b9ae9b64f133bf41cdbf56f584b4cff4549b7a8c5fc8b88e3493b6287555f0512c – before 55c421b364482b61c4c45313a535e61ed5ae4ea3
Linux Linux 2.6.33

References