CVE-2023-54314

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-54314
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54314.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54314
Downstream
Related
Published
2025-12-30T12:23:45.179Z
Modified
2026-03-31T17:29:22.090404584Z
Summary
media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
Details

In the Linux kernel, the following vulnerability has been resolved:

media: af9005: Fix null-ptr-deref in af9005i2cxfer

In af9005i2cxfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005i2cxfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.

Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027i2cxfer()")

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54314.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
af4e067e1dcf926d9523dff11e46c45fd9fa9da2
Fixed
98c12abb275b75a98ff62de9466d21e4daa98536
Fixed
63d962ac7a52c0ff4cd09af2e284dce5e5955dfe
Fixed
0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9
Fixed
c7e5ac737db25d7387fe517cb5207706782b6cf8
Fixed
033b0c0780adee32dde218179e9bc51d2525108f
Fixed
abb6fd93e05e80668d2317fe1110bc99b05034c3
Fixed
e595ff350b2fd600823ee8491df7df693ae4b7c5
Fixed
f4ee84f27625ce1fdf41e8483fa0561a1b837d10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54314.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.23
Fixed
4.14.326
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.295
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.257
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.197
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.133
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.55
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.5.5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54314.json"