CVE-2023-54093 | THREATINT

Description

In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()") [hverkuil: add spaces around +]

PUBLISHED Reserved 2025-12-24 | Published 2025-12-24 | Updated 2025-12-24 | Assigner Linux

Product status

Default status

unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 73c0b224ceeba12dee2a7a8cbc147648da0b2e63

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before e04affec2506ff5c12a18d78d7e694b3556a8982

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 8dc5b370254abc10f0cb4141d90cecf7ce465472

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 3dd5846a873938ec7b6d404ec27662942cd8f2ef

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 14b94154a72388b57221a2a73795c0ea61a95373

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 5975dbbb7ad0767eaabd15d2c37a739ac76acb00

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before c30411266fd67ea3c02a05c157231654d5a3bdc9

affected

Default status

affected

4.14.326 (semver)

unaffected

4.19.295 (semver)

unaffected

5.4.257 (semver)

unaffected

5.10.197 (semver)

unaffected

5.15.133 (semver)

unaffected

6.1.55 (semver)

unaffected

6.5.5 (semver)

unaffected

6.6 (original_commit_for_fix)

unaffected

References

git.kernel.org/...c/73c0b224ceeba12dee2a7a8cbc147648da0b2e63

git.kernel.org/...c/e04affec2506ff5c12a18d78d7e694b3556a8982

git.kernel.org/...c/8dc5b370254abc10f0cb4141d90cecf7ce465472

git.kernel.org/...c/4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac

git.kernel.org/...c/3dd5846a873938ec7b6d404ec27662942cd8f2ef

git.kernel.org/...c/14b94154a72388b57221a2a73795c0ea61a95373

git.kernel.org/...c/5975dbbb7ad0767eaabd15d2c37a739ac76acb00

git.kernel.org/...c/c30411266fd67ea3c02a05c157231654d5a3bdc9

cve.org (CVE-2023-54093)

nvd.nist.gov (CVE-2023-54093)

Download JSON