CVE-2023-54282

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the media subsystem, specifically in the tuners/qt1010 driver. The BUG ON macro was unnecessarily used, causing confusion for the static analysis tool smatch. Replacing BUG ON with a standard error return resolves this issue. The vulnerable code is located in drivers/media/tuners/qt1010.c at line 350 within the qt1010 init() function. The issue relates to a potential buffer overflow in the i2c data buffer, where the size of the buffer (34) is equal to the index being accessed (34).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.