A memory leak in the af9005_identify_state() function in
drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows
attackers to cause a denial of service (memory consumption), aka
CID-2289adbfa559.

It was discovered that the Afatech AF9005 DVB-T USB device driver in the
Linux kernel did not properly deallocate memory in certain error
conditions. A local attacker could possibly use this to cause a denial of
service (kernel memory exhaustion).

tyhicks

The Fixes tag in the fix commit is incorrect. c58b84ee467b introduced the leak.