In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090ptunerwriteserpar and w7090ptunerreadserpar
In w7090ptunerwrite_serpar, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash.
Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027i2cxfer()")
[
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3d77a3fc71c084575d3df4ec6544b3fb6ce587d",
"id": "CVE-2025-38693-00a1add0",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99690a494d91a0dc86cebd628da4c62c40552bcb",
"id": "CVE-2025-38693-0c5ba946",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17b30e5ded062bd74f8ca6f317e1d415a8680665",
"id": "CVE-2025-38693-2162db19",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3d77a3fc71c084575d3df4ec6544b3fb6ce587d",
"id": "CVE-2025-38693-25c239bf",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39b06b93f24dff923c4183d564ed28c039150554",
"id": "CVE-2025-38693-335e128b",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f98132a59ccc59a8b97987363bc99c8968934756",
"id": "CVE-2025-38693-3b2d37b9",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3d77a3fc71c084575d3df4ec6544b3fb6ce587d",
"id": "CVE-2025-38693-46208e4e",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99690a494d91a0dc86cebd628da4c62c40552bcb",
"id": "CVE-2025-38693-53d1c488",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"122434892668313533724189552526051680973",
"47081113120897246920685406344589157935",
"166869819994847790265375974465287887659",
"73434838513762197247208087124293799956"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17b30e5ded062bd74f8ca6f317e1d415a8680665",
"id": "CVE-2025-38693-5f33600c",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed0234c8458b3149f15e496b48a1c9874dd24a1b",
"id": "CVE-2025-38693-6d1163aa",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f98132a59ccc59a8b97987363bc99c8968934756",
"id": "CVE-2025-38693-6fd153ed",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39b06b93f24dff923c4183d564ed28c039150554",
"id": "CVE-2025-38693-73905454",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a41ecfc3415ebe3b4c44f96b3337691dcf431a3",
"id": "CVE-2025-38693-79589c11",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a41ecfc3415ebe3b4c44f96b3337691dcf431a3",
"id": "CVE-2025-38693-8785a887",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed0234c8458b3149f15e496b48a1c9874dd24a1b",
"id": "CVE-2025-38693-89f1a89f",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@454a443eaa792c8865c861a282fe6d4f596abc3a",
"id": "CVE-2025-38693-8e22932d",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@454a443eaa792c8865c861a282fe6d4f596abc3a",
"id": "CVE-2025-38693-8e38df30",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f98132a59ccc59a8b97987363bc99c8968934756",
"id": "CVE-2025-38693-b469ea45",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a41ecfc3415ebe3b4c44f96b3337691dcf431a3",
"id": "CVE-2025-38693-be44326c",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@454a443eaa792c8865c861a282fe6d4f596abc3a",
"id": "CVE-2025-38693-d65fb06e",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39b06b93f24dff923c4183d564ed28c039150554",
"id": "CVE-2025-38693-ee69ead4",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "16379274997729218994813289988936855577",
"length": 495.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17b30e5ded062bd74f8ca6f317e1d415a8680665",
"id": "CVE-2025-38693-f05b6fa3",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_write_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"325891931234055468708678806281896943515",
"201354956417695164190626495138203000330",
"61812937452264185445427992299607905273",
"250271107552598942284696522823434059634",
"60674128398848340581097586132853673381",
"121505188744120611542466366259015200260",
"73371398466386139607695142902418705048",
"47081113120897246920685406344589157935"
]
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99690a494d91a0dc86cebd628da4c62c40552bcb",
"id": "CVE-2025-38693-f3ab769e",
"signature_type": "Line",
"target": {
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
},
{
"digest": {
"function_hash": "177204941124229630195382276779742672313",
"length": 712.0
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed0234c8458b3149f15e496b48a1c9874dd24a1b",
"id": "CVE-2025-38693-fa99f862",
"signature_type": "Function",
"target": {
"function": "w7090p_tuner_read_serpar",
"file": "drivers/media/dvb-frontends/dib7000p.c"
}
}
]