CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux.
CVE
CVE-2023-53220
Severity
MEDIUM
CVSS
5.5
EPSS
0.15%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() In az6007_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach az6007_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
Related CVEs
Other vulnerabilities affecting the same vendor(s)