« Volver al listado

CVE-2023-54314

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

media: af9005: Fix null-ptr-deref in af9005_i2c_xfer

In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.

Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54314",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "98c12abb275b75a98ff62de9466d21e4daa98536",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "63d962ac7a52c0ff4cd09af2e284dce5e5955dfe",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "c7e5ac737db25d7387fe517cb5207706782b6cf8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "033b0c0780adee32dde218179e9bc51d2525108f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "abb6fd93e05e80668d2317fe1110bc99b05034c3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "e595ff350b2fd600823ee8491df7df693ae4b7c5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "af4e067e1dcf926d9523dff11e46c45fd9fa9da2",
              "lessThan": "f4ee84f27625ce1fdf41e8483fa0561a1b837d10",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/media/usb/dvb-usb/af9005.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.23"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "2.6.23",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.14.326",
              "versionType": "semver",
              "lessThanOrEqual": "4.14.*"
            },
            {
              "status": "unaffected",
              "version": "4.19.295",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.197",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.133",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.55",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.5.5",
              "versionType": "semver",
              "lessThanOrEqual": "6.5.*"
            },
            {
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/media/usb/dvb-usb/af9005.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-30T13:16:20.650",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/033b0c0780adee32dde218179e9bc51d2525108f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/63d962ac7a52c0ff4cd09af2e284dce5e5955dfe",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/98c12abb275b75a98ff62de9466d21e4daa98536",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/abb6fd93e05e80668d2317fe1110bc99b05034c3",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c7e5ac737db25d7387fe517cb5207706782b6cf8",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e595ff350b2fd600823ee8491df7df693ae4b7c5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f4ee84f27625ce1fdf41e8483fa0561a1b837d10",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: af9005: Fix null-ptr-deref in af9005_i2c_xfer\n\nIn af9005_i2c_xfer, msg is controlled by user. When msg[i].buf\nis null and msg[i].len is zero, former checks on msg[i].buf would be\npassed. Malicious data finally reach af9005_i2c_xfer. If accessing\nmsg[i].buf[0] without sanity check, null ptr deref would happen.\nWe add check on msg[i].len to prevent crash.\n\nSimilar commit:\ncommit 0ed554fd769a\n(\"media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\")"
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmedia: af9005: Corrección de desreferencia de puntero nulo en af9005_i2c_xfer\n\nEn af9005_i2c_xfer, msg es controlado por el usuario. Cuando msg[i].buf es nulo y msg[i].len es cero, las comprobaciones anteriores en msg[i].buf se pasarían. Datos maliciosos finalmente alcanzan af9005_i2c_xfer. Si se accede a msg[i].buf[0] sin una comprobación de cordura, ocurriría una desreferencia de puntero nulo. Añadimos una comprobación en msg[i].len para prevenir un fallo.\n\nCommit similar:\ncommit 0ed554fd769a\n('media: dvb-usb: az6027: corrección de desreferencia de puntero nulo en az6027_i2c_xfer()')"
    }
  ],
  "lastModified": "2026-06-17T06:47:12.603",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}