media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.23 % · percentile 14 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920x_read() call fail.
References
- https://git.kernel.org/stable/c/809623fedc31f4e74039d93bb75a8993635d7534
- https://git.kernel.org/stable/c/c0178e938f110cdf6937f26975c0c951dbb1d9db
- https://git.kernel.org/stable/c/75d6ef197c488cd852493b4a419274e3489da79d
- https://git.kernel.org/stable/c/d13a84874a2e0236c9325b3adc8e126d0888ad6b
- https://git.kernel.org/stable/c/7ca7cd02114ac8caa6b0a64734b9af6be1559353
- https://git.kernel.org/stable/c/2b6e20ef0585a467c24c7e4fde28518e5b33225a
- https://git.kernel.org/stable/c/4feed3dfca722c6d74865a37cab853c58e6aa190
- https://git.kernel.org/stable/c/2cc9f11aeae2887a4db25c27323fc445f4b49e86
- https://git.kernel.org/stable/c/ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8
European references
- ENISA EUVD · EUVD-2023-60375
- GCVE · GCVE-0-2023-54266
CERT-FR advisories
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 82ce3084892c0c0e006ec61f6144f2cc4e5ece88 < 809623fedc31f4e74039d93bb75a8993635d7534 ; affected 7dca4428d7eb33c89979e620228fe557593fde66 < c0178e938f110cdf6937f26975c0c951dbb1d9db ; affected fe791612afabaeee9b911bd7b955985bcf5ff314 < 75d6ef197c488cd852493b4a419274e3489da79d ; affected 830e5d1b4344c2575020ee4bdf63fb48e2b56ce3 < d13a84874a2e0236c9325b3adc8e126d0888ad6b ; affected 0c044e39d52abfbb4cb43dbc5a09c1dc1ed24648 < 7ca7cd02114ac8caa6b0a64734b9af6be1559353 ; affected a2ab06d7c4d6bfd0b545a768247a70463e977e27 < 2b6e20ef0585a467c24c7e4fde28518e5b33225a |
| Linux · Linux | affected 5.17 ; unaffected 0 < 5.17 ; unaffected 4.14.326 ≤ 4.14.* ; unaffected 4.19.295 ≤ 4.19.* ; unaffected 5.4.257 ≤ 5.4.* ; unaffected 5.10.195 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |