In the Linux kernel, the following vulnerability has been resolved:

media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer

In af9035_i2c_master_xfer, msg is controlled by user. When msg[i].buf
is null and msg[i].len is zero, former checks on msg[i].buf would be
passed. Malicious data finally reach af9035_i2c_master_xfer. If accessing
msg[i].buf[0] without sanity check, null ptr deref would happen.
We add check on msg[i].len to prevent crash.

Similar commit:
commit 0ed554fd769a
("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00011.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < b2f54ed7739dfdf42c4df0a11131aad7c8635464
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < fa58d9db5cad4bb7bb694b6837e3b96d87554f2b
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < b49c6e5dd236787f13a062ec528d724169f11152
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < 6c01ef65de0b321b2db1ef9abf8f1d15862b937e
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < d9ef84a7c222497ecb5fdf93361c76931804825e
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < 0143f282b15f7cedc0392ea10050fb6000fd16e6
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < 41b7181a40af84448a2b144fb02d8bf32b7e9a23
7f882c2e353ca58695e9b4fcc9e97a9d4cbcf273 affected < 7bf744f2de0a848fb1d717f5831b03db96feae89
Linux Linux affected
Version Status Constraints
3.5 affected —
0 unaffected < 3.5
4.14.326 unaffected ≤ 4.14.*
4.19.295 unaffected ≤ 4.19.*
5.4.257 unaffected ≤ 5.4.*
5.10.197 unaffected ≤ 5.10.*
5.15.133 unaffected ≤ 5.15.*
6.1.55 unaffected ≤ 6.1.*
6.5.5 unaffected ≤ 6.5.*
6.6 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0143f282b15f7cedc0392ea10050fb6000fd16e6 cve-icon cve-icon
https://git.kernel.org/stable/c/41b7181a40af84448a2b144fb02d8bf32b7e9a23 cve-icon cve-icon
https://git.kernel.org/stable/c/6c01ef65de0b321b2db1ef9abf8f1d15862b937e cve-icon cve-icon
https://git.kernel.org/stable/c/7bf744f2de0a848fb1d717f5831b03db96feae89 cve-icon cve-icon
https://git.kernel.org/stable/c/b2f54ed7739dfdf42c4df0a11131aad7c8635464 cve-icon cve-icon
https://git.kernel.org/stable/c/b49c6e5dd236787f13a062ec528d724169f11152 cve-icon cve-icon
https://git.kernel.org/stable/c/d9ef84a7c222497ecb5fdf93361c76931804825e cve-icon cve-icon
https://git.kernel.org/stable/c/fa58d9db5cad4bb7bb694b6837e3b96d87554f2b cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024090653-CVE-2023-52915-21a9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52915 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52915 cve-icon
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00038}

 epss

{'score': 0.0004}

Tue, 10 Sep 2024 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Tue, 10 Sep 2024 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 06 Sep 2024 13:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 06 Sep 2024 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer In af9035_i2c_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9035_i2c_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
Title media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:17:55.200Z

Reserved: 2024-08-21T06:07:11.017Z

Link: CVE-2023-52915

cve-icon Vulnrichment

Updated: 2024-09-10T00:39:55.231Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-06T09:15:02.787

Modified: 2024-09-10T17:12:41.607

Link: CVE-2023-52915

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-09-06T00:00:00Z

Links: CVE-2023-52915 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses