CVE-2023-54066

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s gl861 i2c master xfer function within the dvb-usb-v2 module. The issue arises because the msg parameter, controlled by the user, can lead to a null pointer dereference if msg[i].buf is null and msg[i].len is zero. This occurs when accessing msg[i].buf[0] without proper validation, potentially causing a crash. The vulnerability is addressed by adding a check on msg[i].len to prevent the crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.