CVE-2023-28328

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dvb-usb/az6027.c. The issue arises because messages from user space are not properly checked before being transferred into the device. This flaw allows a local user to crash the system or potentially cause a denial of service. The vulnerability is related to the function az6027 i2c xfer() and is caused by a null pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.