CVE-2023-54093

media: anysee: fix null-ptr-deref in anysee_master_xfer

State: Published
Severity: Not scored
Published: Dec 24, 2025
Updated: May 11, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: anysee: fix null-ptr-deref in anysee_master_xfer

In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.

Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

[hverkuil: add spaces around +]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 73c0b224ceeba12dee2a7a8cbc147648da0b2e63Affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before e04affec2506ff5c12a18d78d7e694b3556a8982Affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 8dc5b370254abc10f0cb4141d90cecf7ce465472Affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 4a9763d2bc4a6d6fab42555b9c0b2eefa32585acAffected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 3dd5846a873938ec7b6d404ec27662942cd8f2efAffected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 14b94154a72388b57221a2a73795c0ea61a95373Affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 5975dbbb7ad0767eaabd15d2c37a739ac76acb00Affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before c30411266fd67ea3c02a05c157231654d5a3bdc9Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.197 through 5.10.Not affected 5.15.133 through 5.15.Not affected 6.1.55 through 6.1.Not affected 6.5.5 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 73c0b224ceeba12dee2a7a8cbc147648da0b2e63Affected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before e04affec2506ff5c12a18d78d7e694b3556a8982Affected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 8dc5b370254abc10f0cb4141d90cecf7ce465472Affected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 4a9763d2bc4a6d6fab42555b9c0b2eefa32585acAffected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 3dd5846a873938ec7b6d404ec27662942cd8f2efAffected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 14b94154a72388b57221a2a73795c0ea61a95373Affected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before 5975dbbb7ad0767eaabd15d2c37a739ac76acb00Affected
a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b to before c30411266fd67ea3c02a05c157231654d5a3bdc9Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.197 through 5.10.*Not affected
5.15.133 through 5.15.*Not affected
6.1.55 through 6.1.*Not affected
6.5.5 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.