CVE-2023-54314 - Vulnerability Details

- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer

Description

In the Linux kernel, the following vulnerability has been resolved:

media: af9005: Fix null-ptr-deref in af9005_i2c_xfer

In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf
is null and msg[i].len is zero, former checks on msg[i].buf would be
passed. Malicious data finally reach af9005_i2c_xfer. If accessing
msg[i].buf[0] without sanity check, null ptr deref would happen.
We add check on msg[i].len to prevent crash.

Similar commit:
commit 0ed554fd769a
("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

Published: 2025-12-30

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< 98c12abb275b75a98ff62de9466d21e4daa98536
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< 63d962ac7a52c0ff4cd09af2e284dce5e5955dfe
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< 0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< c7e5ac737db25d7387fe517cb5207706782b6cf8
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< 033b0c0780adee32dde218179e9bc51d2525108f
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< abb6fd93e05e80668d2317fe1110bc99b05034c3
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< e595ff350b2fd600823ee8491df7df693ae4b7c5
`af4e067e1dcf926d9523dff11e46c45fd9fa9da2`	affected	< f4ee84f27625ce1fdf41e8483fa0561a1b837d10

Linux

affected

Version	Status	Constraints
`2.6.23`	affected	—
`0`	unaffected	< 2.6.23
`4.14.326`	unaffected	≤ 4.14.*
`4.19.295`	unaffected	≤ 4.19.*
`5.4.257`	unaffected	≤ 5.4.*
`5.10.197`	unaffected	≤ 5.10.*
`5.15.133`	unaffected	≤ 5.15.*
`6.1.55`	unaffected	≤ 6.1.*
`6.5.5`	unaffected	≤ 6.5.*
`6.6`	unaffected	≤ *

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00034.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/033b0c0780adee32dde218179e9bc51d2525108f
https://git.kernel.org/stable/c/0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9
https://git.kernel.org/stable/c/63d962ac7a52c0ff4cd09af2e284dce5e5955dfe
https://git.kernel.org/stable/c/98c12abb275b75a98ff62de9466d21e4daa98536
https://git.kernel.org/stable/c/abb6fd93e05e80668d2317fe1110bc99b05034c3
https://git.kernel.org/stable/c/c7e5ac737db25d7387fe517cb5207706782b6cf8
https://git.kernel.org/stable/c/e595ff350b2fd600823ee8491df7df693ae4b7c5
https://git.kernel.org/stable/c/f4ee84f27625ce1fdf41e8483fa0561a1b837d10
https://lore.kernel.org/linux-cve-announce/2025123037-CVE-2023-54314-a578@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54314
https://www.cve.org/CVERecord?id=CVE-2023-54314

History

Wed, 31 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123037-CVE-2023-54314-a578@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54314 https://www.cve.org/CVERecord?id=CVE-2023-54314
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 30 Dec 2025 12:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005_i2c_xfer In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
Title		media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/033b0c0780adee32dde218179e9bc51d2525108f https://git.kernel.org/stable/c/0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9 https://git.kernel.org/stable/c/63d962ac7a52c0ff4cd09af2e284dce5e5955dfe https://git.kernel.org/stable/c/98c12abb275b75a98ff62de9466d21e4daa98536 https://git.kernel.org/stable/c/abb6fd93e05e80668d2317fe1110bc99b05034c3 https://git.kernel.org/stable/c/c7e5ac737db25d7387fe517cb5207706782b6cf8 https://git.kernel.org/stable/c/e595ff350b2fd600823ee8491df7df693ae4b7c5 https://git.kernel.org/stable/c/f4ee84f27625ce1fdf41e8483fa0561a1b837d10

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:23:45.179Z

Updated: 2026-05-11T19:59:34.318Z

Reserved: 2025-12-30T12:06:44.531Z

Link: CVE-2023-54314

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:20.650

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54314

Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54314 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object