Vulnerability in Linux

CVE-2023-54266

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920x_read() call fail.

EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 5.15.132, a2ab06d7c4d6bfd0b545a768247a70463e977e27, 6.5.3

References