CVE-2023-53220

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The az6007 i2c xfer function is susceptible to a null pointer dereference. This occurs when the msg parameter, controlled by the user, has a null buffer (msg[i].buf) and a length of zero (msg[i].len). Without proper validation, malicious data can trigger a crash when accessing msg[i].buf[0]. A check on msg[i].len has been added to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.