Description
In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()") [hverkuil: add spaces around +]
References (8)
Core 8
Core References
Scores
EPSS
0.0019
EPSS Percentile
9.1%
Details
Status
published
Products (25)
linux/Kernel
2.6.27 - 4.14.326linux
linux/Kernel
4.15.0 - 4.19.295linux
linux/Kernel
4.20.0 - 5.4.257linux
linux/Kernel
5.11.0 - 5.15.133linux
linux/Kernel
5.16.0 - 6.1.55linux
linux/Kernel
5.5.0 - 5.10.197linux
linux/Kernel
6.2.0 - 6.5.5linux
Linux/Linux
< 2.6.27
Linux/Linux
2.6.27
Linux/Linux
4.14.326 - 4.14.*
... and 15 more
Published
Dec 24, 2025
Tracked Since
Feb 18, 2026