CVE-2023-54093

Linux Kernel - Null Pointer Dereference

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()") [hverkuil: add spaces around +]

Scores

EPSS 0.0019
EPSS Percentile 9.1%

Details

Status published
Products (25)
linux/Kernel 2.6.27 - 4.14.326linux
linux/Kernel 4.15.0 - 4.19.295linux
linux/Kernel 4.20.0 - 5.4.257linux
linux/Kernel 5.11.0 - 5.15.133linux
linux/Kernel 5.16.0 - 6.1.55linux
linux/Kernel 5.5.0 - 5.10.197linux
linux/Kernel 6.2.0 - 6.5.5linux
Linux/Linux < 2.6.27
Linux/Linux 2.6.27
Linux/Linux 4.14.326 - 4.14.*
... and 15 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026