CVE-2023-54266
media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
30 Dec 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
'read' is freed when it is known to be NULL, but not when a read error
occurs.
Revert the logic to avoid a small leak, should a m920x_read() call fail.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/2b6e20ef0585a467c24c7e4fde28518e5b33225ahttps://git.kernel.org/stable/c/2cc9f11aeae2887a4db25c27323fc445f4b49e86https://git.kernel.org/stable/c/4feed3dfca722c6d74865a37cab853c58e6aa190https://git.kernel.org/stable/c/75d6ef197c488cd852493b4a419274e3489da79dhttps://git.kernel.org/stable/c/7ca7cd02114ac8caa6b0a64734b9af6be1559353https://git.kernel.org/stable/c/809623fedc31f4e74039d93bb75a8993635d7534https://git.kernel.org/stable/c/c0178e938f110cdf6937f26975c0c951dbb1d9dbhttps://git.kernel.org/stable/c/d13a84874a2e0236c9325b3adc8e126d0888ad6bhttps://git.kernel.org/stable/c/ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8