{"id":"CVE-2023-54266","state":"PUBLISHED","title":"media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()\n\n'read' is freed when it is known to be NULL, but not when a read error\noccurs.\n\nRevert the logic to avoid a small leak, should a m920x_read() call fail.","publishedAt":"2025-12-30T12:15:58.235Z","updatedAt":"2026-05-23T15:34:53.986Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"82ce3084892c0c0e006ec61f6144f2cc4e5ece88","status":"affected","lessThan":"809623fedc31f4e74039d93bb75a8993635d7534","versionType":"git"},{"version":"7dca4428d7eb33c89979e620228fe557593fde66","status":"affected","lessThan":"c0178e938f110cdf6937f26975c0c951dbb1d9db","versionType":"git"},{"version":"fe791612afabaeee9b911bd7b955985bcf5ff314","status":"affected","lessThan":"75d6ef197c488cd852493b4a419274e3489da79d","versionType":"git"},{"version":"830e5d1b4344c2575020ee4bdf63fb48e2b56ce3","status":"affected","lessThan":"d13a84874a2e0236c9325b3adc8e126d0888ad6b","versionType":"git"},{"version":"0c044e39d52abfbb4cb43dbc5a09c1dc1ed24648","status":"affected","lessThan":"7ca7cd02114ac8caa6b0a64734b9af6be1559353","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"2b6e20ef0585a467c24c7e4fde28518e5b33225a","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"4feed3dfca722c6d74865a37cab853c58e6aa190","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"2cc9f11aeae2887a4db25c27323fc445f4b49e86","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8","versionType":"git"},{"version":"08cb4f0da9926277101d18d817048e1328ac2563","status":"affected","versionType":"git"},{"version":"273cac7a89712ba6b898214af150b71dc33abe0c","status":"affected","versionType":"git"},{"version":"b7e221dc8f23727e00a7fb6709b3318547a7c4d8","status":"affected","versionType":"git"},{"version":"4.14.263","status":"affected","lessThan":"4.14.326","versionType":"semver"},{"version":"4.19.226","status":"affected","lessThan":"4.19.295","versionType":"semver"},{"version":"5.4.174","status":"affected","lessThan":"5.4.257","versionType":"semver"},{"version":"5.10.94","status":"affected","lessThan":"5.10.195","versionType":"semver"},{"version":"5.15.17","status":"affected","lessThan":"5.15.132","versionType":"semver"},{"version":"4.4.300","status":"affected","lessThan":"4.5","versionType":"semver"},{"version":"4.9.298","status":"affected","lessThan":"4.10","versionType":"semver"},{"version":"5.16.3","status":"affected","lessThan":"5.17","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/usb/dvb-usb/m920x.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.17","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.17","versionType":"semver"},{"version":"4.14.326","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.295","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.257","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.195","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.132","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.53","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.16","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5.3","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/usb/dvb-usb/m920x.c"]}],"references":["https://git.kernel.org/stable/c/809623fedc31f4e74039d93bb75a8993635d7534","https://git.kernel.org/stable/c/c0178e938f110cdf6937f26975c0c951dbb1d9db","https://git.kernel.org/stable/c/75d6ef197c488cd852493b4a419274e3489da79d","https://git.kernel.org/stable/c/d13a84874a2e0236c9325b3adc8e126d0888ad6b","https://git.kernel.org/stable/c/7ca7cd02114ac8caa6b0a64734b9af6be1559353","https://git.kernel.org/stable/c/2b6e20ef0585a467c24c7e4fde28518e5b33225a","https://git.kernel.org/stable/c/4feed3dfca722c6d74865a37cab853c58e6aa190","https://git.kernel.org/stable/c/2cc9f11aeae2887a4db25c27323fc445f4b49e86","https://git.kernel.org/stable/c/ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/54xxx/CVE-2023-54266.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-54266","state":"PUBLISHED","datePublished":"2025-12-30T12:15:58.235Z","dateUpdated":"2026-05-23T15:34:53.986Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-30T12:06:44.518Z"},"containers":{"cna":{"title":"media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()\n\n'read' is freed when it is known to be NULL, but not when a read error\noccurs.\n\nRevert the logic to avoid a small leak, should a m920x_read() call fail."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"82ce3084892c0c0e006ec61f6144f2cc4e5ece88","status":"affected","lessThan":"809623fedc31f4e74039d93bb75a8993635d7534","versionType":"git"},{"version":"7dca4428d7eb33c89979e620228fe557593fde66","status":"affected","lessThan":"c0178e938f110cdf6937f26975c0c951dbb1d9db","versionType":"git"},{"version":"fe791612afabaeee9b911bd7b955985bcf5ff314","status":"affected","lessThan":"75d6ef197c488cd852493b4a419274e3489da79d","versionType":"git"},{"version":"830e5d1b4344c2575020ee4bdf63fb48e2b56ce3","status":"affected","lessThan":"d13a84874a2e0236c9325b3adc8e126d0888ad6b","versionType":"git"},{"version":"0c044e39d52abfbb4cb43dbc5a09c1dc1ed24648","status":"affected","lessThan":"7ca7cd02114ac8caa6b0a64734b9af6be1559353","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"2b6e20ef0585a467c24c7e4fde28518e5b33225a","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"4feed3dfca722c6d74865a37cab853c58e6aa190","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"2cc9f11aeae2887a4db25c27323fc445f4b49e86","versionType":"git"},{"version":"a2ab06d7c4d6bfd0b545a768247a70463e977e27","status":"affected","lessThan":"ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8","versionType":"git"},{"version":"08cb4f0da9926277101d18d817048e1328ac2563","status":"affected","versionType":"git"},{"version":"273cac7a89712ba6b898214af150b71dc33abe0c","status":"affected","versionType":"git"},{"version":"b7e221dc8f23727e00a7fb6709b3318547a7c4d8","status":"affected","versionType":"git"},{"version":"4.14.263","status":"affected","lessThan":"4.14.326","versionType":"semver"},{"version":"4.19.226","status":"affected","lessThan":"4.19.295","versionType":"semver"},{"version":"5.4.174","status":"affected","lessThan":"5.4.257","versionType":"semver"},{"version":"5.10.94","status":"affected","lessThan":"5.10.195","versionType":"semver"},{"version":"5.15.17","status":"affected","lessThan":"5.15.132","versionType":"semver"},{"version":"4.4.300","status":"affected","lessThan":"4.5","versionType":"semver"},{"version":"4.9.298","status":"affected","lessThan":"4.10","versionType":"semver"},{"version":"5.16.3","status":"affected","lessThan":"5.17","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/usb/dvb-usb/m920x.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.17","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.17","versionType":"semver"},{"version":"4.14.326","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.295","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.257","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.195","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.132","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.53","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.16","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5.3","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/media/usb/dvb-usb/m920x.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/809623fedc31f4e74039d93bb75a8993635d7534"},{"url":"https://git.kernel.org/stable/c/c0178e938f110cdf6937f26975c0c951dbb1d9db"},{"url":"https://git.kernel.org/stable/c/75d6ef197c488cd852493b4a419274e3489da79d"},{"url":"https://git.kernel.org/stable/c/d13a84874a2e0236c9325b3adc8e126d0888ad6b"},{"url":"https://git.kernel.org/stable/c/7ca7cd02114ac8caa6b0a64734b9af6be1559353"},{"url":"https://git.kernel.org/stable/c/2b6e20ef0585a467c24c7e4fde28518e5b33225a"},{"url":"https://git.kernel.org/stable/c/4feed3dfca722c6d74865a37cab853c58e6aa190"},{"url":"https://git.kernel.org/stable/c/2cc9f11aeae2887a4db25c27323fc445f4b49e86"},{"url":"https://git.kernel.org/stable/c/ea9ef6c2e001c5dc94bee35ebd1c8a98621cf7b8"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T15:34:53.986Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.14.263","versionEndExcluding":"4.14.326"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.226","versionEndExcluding":"4.19.295"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.174","versionEndExcluding":"5.4.257"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.94","versionEndExcluding":"5.10.195"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.17","versionEndExcluding":"5.15.132"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.17","versionEndExcluding":"6.1.53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.17","versionEndExcluding":"6.4.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.17","versionEndExcluding":"6.5.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.17","versionEndExcluding":"6.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.300"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9.298"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16.3"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}