In the Linux kernel, the following vulnerability has been resolved:
mmc: vub300: fix return value check of mmcaddhost()
mmcaddhost() may return error, if we ignore its return value, the memory that allocated in mmcallochost() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path.
So fix this by checking the return value and goto error path which will call mmcfreehost(), besides, the timer added before mmcaddhost() needs be del.
And this patch fixes another missing call mmcfreehost() if usbcontrolmsg() fails.