CVE-2023-54093

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: anysee: fix null-ptr-deref in anysee_master_xfer

In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.

Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

[hverkuil: add spaces around +]

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < 73c0b224ceeba12dee2a7a8cbc147648da0b2e63; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < e04affec2506ff5c12a18d78d7e694b3556a8982; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < 8dc5b370254abc10f0cb4141d90cecf7ce465472; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < 4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < 3dd5846a873938ec7b6d404ec27662942cd8f2ef; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < 14b94154a72388b57221a2a73795c0ea61a95373; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < 5975dbbb7ad0767eaabd15d2c37a739ac76acb00; >= a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b, < c30411266fd67ea3c02a05c157231654d5a3bdc9
LinuxLinux2.6.27

References

Timeline

Published
Dec 24, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-540949.8In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported sevCVE-2023-540957.0In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses fail_ioCVE-2023-540967.8In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses twoCVE-2023-54097In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulaCVE-2023-540987.3In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, CVE-2023-54099In the Linux kernel, the following vulnerability has been resolved: fs: Protect reconfiguration of sb read-write from racing writes The reCVE-2023-54108.2A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering. HP isCVE-2023-541007.8In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix use after free bug in qedi_remove() In qedi_probe() weCVE-2023-54101In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: use _safe loop iterator to avoid a use after free CVE-2023-54102In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow A stCVE-2023-541047.8In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs'CVE-2023-54105In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing check
CVE-2023-54093: Unscored | Vulnix