CVE-2023-54314

media: af9005: Fix null-ptr-deref in af9005_i2c_xfer

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: af9005: Fix null-ptr-deref in af9005_i2c_xfer

In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.

Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 98c12abb275b75a98ff62de9466d21e4daa98536Affected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 63d962ac7a52c0ff4cd09af2e284dce5e5955dfeAffected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9Affected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before c7e5ac737db25d7387fe517cb5207706782b6cf8Affected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 033b0c0780adee32dde218179e9bc51d2525108fAffected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before abb6fd93e05e80668d2317fe1110bc99b05034c3Affected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before e595ff350b2fd600823ee8491df7df693ae4b7c5Affected af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before f4ee84f27625ce1fdf41e8483fa0561a1b837d10Affected
LinuxLinux	2.6.23Affected before 2.6.23Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.197 through 5.10.Not affected 5.15.133 through 5.15.Not affected 6.1.55 through 6.1.Not affected 6.5.5 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 98c12abb275b75a98ff62de9466d21e4daa98536Affected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 63d962ac7a52c0ff4cd09af2e284dce5e5955dfeAffected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9Affected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before c7e5ac737db25d7387fe517cb5207706782b6cf8Affected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before 033b0c0780adee32dde218179e9bc51d2525108fAffected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before abb6fd93e05e80668d2317fe1110bc99b05034c3Affected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before e595ff350b2fd600823ee8491df7df693ae4b7c5Affected
af4e067e1dcf926d9523dff11e46c45fd9fa9da2 to before f4ee84f27625ce1fdf41e8483fa0561a1b837d10Affected

LinuxLinux

2.6.23Affected
before 2.6.23Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.197 through 5.10.*Not affected
5.15.133 through 5.15.*Not affected
6.1.55 through 6.1.*Not affected
6.5.5 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.