What’s Vulnerable › Vulnerabilities

CVE-2023-54266: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920x_read() call fail.

Affected products

• Linux kernel: from 4.14.263 before 4.14.326; from 4.19.226 before 4.19.295; from 5.4.174 before 5.4.257; from 5.10.94 before 5.10.195; from 5.15.17 before 5.15.132; from 4.4.300 before 4.5 — fixed in 4.10, 4.14.326, 4.19.295, 4.5, 5.10.195, 5.15.132

How to fix

Upgrade to a fixed version: Linux kernel 4.10, 4.14.326, 4.19.295, 4.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2b6e20ef0585a467c24c7e4fde28518e5b33225a
• https://git.kernel.org/stable/c/2cc9f11aeae2887a4db25c27323fc445f4b49e86
• https://git.kernel.org/stable/c/4feed3dfca722c6d74865a37cab853c58e6aa190
• https://git.kernel.org/stable/c/75d6ef197c488cd852493b4a419274e3489da79d
• https://git.kernel.org/stable/c/7ca7cd02114ac8caa6b0a64734b9af6be1559353
• https://git.kernel.org/stable/c/809623fedc31f4e74039d93bb75a8993635d7534
• https://git.kernel.org/stable/c/c0178e938f110cdf6937f26975c0c951dbb1d9db
• https://git.kernel.org/stable/c/d13a84874a2e0236c9325b3adc8e126d0888ad6b
• https://git.kernel.org/stable/c/ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8

Get alerted when CVE-2023-54266 or the next vulnerability affects your stack