CVE-2023-54314
Unknown Unknown - Not Provided
Null Pointer Dereference in Linux af9005_i2c_xfer Function

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005_i2c_xfer In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-06-16
AI Q&A
2025-12-30
EPSS Evaluated
2026-06-14
NVD
CVE-2023-54314
EUVD
EUVD-2023-60490
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel *
linux kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

This vulnerability can cause a denial of service by crashing the Linux kernel when a specially crafted message is processed by the af9005 media driver. An attacker who can supply malicious data to this function could trigger a kernel crash, leading to system instability or downtime.

Executive Summary

This vulnerability is a null pointer dereference in the Linux kernel's af9005 media driver, specifically in the af9005_i2c_xfer function. The issue arises because the function processes user-controlled data (msg). If msg[i].buf is null and msg[i].len is zero, previous checks on msg[i].buf are bypassed, leading to a null pointer dereference when the code tries to access msg[i].buf[0] without verifying its validity. This can cause the kernel to crash. The fix involves adding a check on msg[i].len to prevent this crash.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54314. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart