CVE-2023-54266
media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.14.326, 4.19.295, 5.4.257, 5.10.195, 5.15.132, and 3 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920x_read() call fail.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 4.14.263 · fixed in 4.14.326; From 4.19.226 · fixed in 4.19.295; From 5.4.174 · fixed in 5.4.257; From 5.10.94 · fixed in 5.10.195; From 5.15.17 · fixed in 5.15.132; From 4.4.300 · fixed in 4.5; From 4.9.298 · fixed in 4.10; From 5.16.3 · fixed in 5.17
- Linux Linux
5.17
References 9
git.kernel.org
- stable/c/809623fedc31f4e74039d93bb75a8993635d7534
- stable/c/c0178e938f110cdf6937f26975c0c951dbb1d9db
- stable/c/75d6ef197c488cd852493b4a419274e3489da79d
- stable/c/d13a84874a2e0236c9325b3adc8e126d0888ad6b
- stable/c/7ca7cd02114ac8caa6b0a64734b9af6be1559353
- stable/c/2b6e20ef0585a467c24c7e4fde28518e5b33225a
- stable/c/4feed3dfca722c6d74865a37cab853c58e6aa190
- stable/c/2cc9f11aeae2887a4db25c27323fc445f4b49e86
- stable/c/ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8