CVE-2023-54314 | THREATINT

Description

In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005_i2c_xfer In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

PUBLISHED Reserved 2025-12-30 | Published 2025-12-30 | Updated 2025-12-30 | Assigner Linux

Product status

Default status

unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 98c12abb275b75a98ff62de9466d21e4daa98536

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 63d962ac7a52c0ff4cd09af2e284dce5e5955dfe

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before c7e5ac737db25d7387fe517cb5207706782b6cf8

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 033b0c0780adee32dde218179e9bc51d2525108f

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before abb6fd93e05e80668d2317fe1110bc99b05034c3

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before e595ff350b2fd600823ee8491df7df693ae4b7c5

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before f4ee84f27625ce1fdf41e8483fa0561a1b837d10

affected

Default status

affected

4.14.326 (semver)

unaffected

4.19.295 (semver)

unaffected

5.4.257 (semver)

unaffected

5.10.197 (semver)

unaffected

5.15.133 (semver)

unaffected

6.1.55 (semver)

unaffected

6.5.5 (semver)

unaffected

6.6 (original_commit_for_fix)

unaffected

References

git.kernel.org/...c/98c12abb275b75a98ff62de9466d21e4daa98536

git.kernel.org/...c/63d962ac7a52c0ff4cd09af2e284dce5e5955dfe

git.kernel.org/...c/0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9

git.kernel.org/...c/c7e5ac737db25d7387fe517cb5207706782b6cf8

git.kernel.org/...c/033b0c0780adee32dde218179e9bc51d2525108f

git.kernel.org/...c/abb6fd93e05e80668d2317fe1110bc99b05034c3

git.kernel.org/...c/e595ff350b2fd600823ee8491df7df693ae4b7c5

git.kernel.org/...c/f4ee84f27625ce1fdf41e8483fa0561a1b837d10

cve.org (CVE-2023-54314)

nvd.nist.gov (CVE-2023-54314)

Download JSON