In the Linux kernel, the following vulnerability has been resolved:
mmc: rtsxpci: fix return value check of mmcadd_host()
mmcaddhost() may return error, if we ignore its return value, the memory that allocated in mmcallochost() will be leaked and it will lead a kernel crash because of deleting not added device in the remove path.
So fix this by checking the return value and calling mmcfreehost() in the error path, beside, runtime PM also needs be disabled.