Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2023-54314: Linux kernel I2C driver may cause system crash
CVE-2023-54314 · published 10 months ago
Summary
The I2C communication code in the Linux kernel can be triggered by specially crafted input that leads to a null pointer access, potentially crashing the system. This affects Linux distributions that include the kernel versions listed, such as Ubuntu and Debian. Updating to the latest kernel packages that contain the fix will prevent the crash.
What to do
- Update debian linux to version 5.10.197-1.
- Update debian linux to version 6.1.55-1.
- Update debian linux to version 6.5.6-1.
- Update canonical linux-aws-5.4 to version 5.4.0-1116.126~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1121.128~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1120.129~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-169.187~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1063.68~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1115.124~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1100.112~18.04.1.
- Update canonical linux to version 5.4.0-169.187.
- Update canonical linux-aws to version 5.4.0-1116.126.
- Update canonical linux-aws-5.15 to version 5.15.0-1053.58~20.04.1.
- Update canonical linux-azure to version 5.4.0-1121.128.
- Update canonical linux-azure-5.15 to version 5.15.0-1056.64~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1076.82.
- Update canonical linux-gcp to version 5.4.0-1120.129.
- Update canonical linux-gcp-5.15 to version 5.15.0-1051.59~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1063.68.
- Update canonical linux-ibm-5.15 to version 5.15.0-1046.49~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1048.54~20.04.1.
- Update canonical linux-iot to version 5.4.0-1028.29.
- Update canonical linux-kvm to version 5.4.0-1104.111.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1022.22~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1115.124.
- Update canonical linux-oracle-5.15 to version 5.15.0-1051.57~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1100.112.
- Update canonical linux-riscv-5.15 to version 5.15.0-1049.53~20.04.2.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1035.39.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1116.126+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1121.128+fips1.
- Update canonical linux-fips to version 5.4.0-1090.100.
- Update canonical linux-gcp-fips to version 5.4.0-1120.129+fips1.
- Update canonical linux to version 5.15.0-94.104.
- Update canonical linux-aws to version 5.15.0-1053.58.
- Update canonical linux-azure to version 5.15.0-1056.64.
- Update canonical linux-gcp to version 5.15.0-1051.59.
- Update canonical linux-gke to version 5.15.0-1050.55.
- Update canonical linux-gkeop to version 5.15.0-1036.42.
- Update canonical linux-ibm to version 5.15.0-1046.49.
- Update canonical linux-intel-iotg to version 5.15.0-1047.53.
- Update canonical linux-kvm to version 5.15.0-1050.55.
- Update canonical linux-lowlatency to version 5.15.0-94.104.
- Update canonical linux-nvidia to version 5.15.0-1044.44.
- Update canonical linux-nvidia-tegra to version 5.15.0-1022.22.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1009.9.
- Update canonical linux-oracle to version 5.15.0-1051.57.
- Update canonical linux-raspi to version 5.15.0-1046.49.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1035.37.
- Update canonical linux-aws-fips to version 5.15.0-1053.58+fips1.
- Update canonical linux-fips to version 5.15.0-94.104+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1055.63+fips2.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1046.48.
- Update canonical linux-realtime to version 5.15.0-1054.60.
- Update canonical linux-azure-fde to version 5.15.0-1056.64.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Debian:11 | debian | linux |
< 5.10.197-1 Fix: upgrade to 5.10.197-1
|
| Debian:12 | debian | linux |
< 6.1.55-1 Fix: upgrade to 6.1.55-1
|
| Debian:13 | debian | linux |
< 6.5.6-1 Fix: upgrade to 6.5.6-1
|
| Debian:14 | debian | linux |
< 6.5.6-1 Fix: upgrade to 6.5.6-1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1116.126~18.04.1 Fix: upgrade to 5.4.0-1116.126~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1121.128~18.04.1 Fix: upgrade to 5.4.0-1121.128~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1120.129~18.04.1 Fix: upgrade to 5.4.0-1120.129~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-169.187~18.04.1 Fix: upgrade to 5.4.0-169.187~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1063.68~18.04.1 Fix: upgrade to 5.4.0-1063.68~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1115.124~18.04.1 Fix: upgrade to 5.4.0-1115.124~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1100.112~18.04.1 Fix: upgrade to 5.4.0-1100.112~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-169.187 Fix: upgrade to 5.4.0-169.187
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1116.126 Fix: upgrade to 5.4.0-1116.126
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1053.58~20.04.1 Fix: upgrade to 5.15.0-1053.58~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1121.128 Fix: upgrade to 5.4.0-1121.128
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1056.64~20.04.1 Fix: upgrade to 5.15.0-1056.64~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1076.82 Fix: upgrade to 5.4.0-1076.82
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1120.129 Fix: upgrade to 5.4.0-1120.129
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1051.59~20.04.1 Fix: upgrade to 5.15.0-1051.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
Showing 50 of 158. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1063.68 Fix: upgrade to 5.4.0-1063.68
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1046.49~20.04.1 Fix: upgrade to 5.15.0-1046.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1048.54~20.04.1 Fix: upgrade to 5.15.0-1048.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1028.29 Fix: upgrade to 5.4.0-1028.29
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1104.111 Fix: upgrade to 5.4.0-1104.111
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1022.22~20.04.1 Fix: upgrade to 5.15.0-1022.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1115.124 Fix: upgrade to 5.4.0-1115.124
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1051.57~20.04.1 Fix: upgrade to 5.15.0-1051.57~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1100.112 Fix: upgrade to 5.4.0-1100.112
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1049.53~20.04.2 Fix: upgrade to 5.15.0-1049.53~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1035.39 Fix: upgrade to 5.4.0-1035.39
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1116.126+fips1 Fix: upgrade to 5.4.0-1116.126+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1121.128+fips1 Fix: upgrade to 5.4.0-1121.128+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1090.100 Fix: upgrade to 5.4.0-1090.100
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1120.129+fips1 Fix: upgrade to 5.4.0-1120.129+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1053.58 Fix: upgrade to 5.15.0-1053.58
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1056.64 Fix: upgrade to 5.15.0-1056.64
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1051.59 Fix: upgrade to 5.15.0-1051.59
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1036.42 Fix: upgrade to 5.15.0-1036.42
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1047.53 Fix: upgrade to 5.15.0-1047.53
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1044.44 Fix: upgrade to 5.15.0-1044.44
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1022.22 Fix: upgrade to 5.15.0-1022.22
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1009.9 Fix: upgrade to 5.15.0-1009.9
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1051.57 Fix: upgrade to 5.15.0-1051.57
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1035.37 Fix: upgrade to 5.15.0-1035.37
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1053.58+fips1 Fix: upgrade to 5.15.0-1053.58+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-94.104+fips1 Fix: upgrade to 5.15.0-94.104+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1055.63+fips2 Fix: upgrade to 5.15.0-1055.63+fips2
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1046.48 Fix: upgrade to 5.15.0-1046.48
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1054.60 Fix: upgrade to 5.15.0-1054.60
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1056.64.1 Fix: upgrade to 5.15.0-1056.64.1
|
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005_i2c_xfer In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and m...
In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005_i2c_xfer In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
References
- https://security-tracker.debian.org/tracker/CVE-2023-54314 Vendor Advisory
- https://git.kernel.org/stable/c/c7e5ac737db25d7387fe517cb5207706782b6cf8 Third Party Advisory
- https://git.kernel.org/stable/c/e595ff350b2fd600823ee8491df7df693ae4b7c5 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-54314 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-54314 Third Party Advisory
- https://git.kernel.org/linus/f4ee84f27625ce1fdf41e8483fa0561a1b837d10 Third Party Advisory
- https://git.kernel.org/stable/c/033b0c0780adee32dde218179e9bc51d2525108f Third Party Advisory
- https://git.kernel.org/stable/c/0c02eb70b1dd4ae9bb304ce6cdadbc6faba2b2e9 Third Party Advisory
- https://git.kernel.org/stable/c/63d962ac7a52c0ff4cd09af2e284dce5e5955dfe Third Party Advisory
- https://git.kernel.org/stable/c/98c12abb275b75a98ff62de9466d21e4daa98536 Third Party Advisory
- https://git.kernel.org/stable/c/abb6fd93e05e80668d2317fe1110bc99b05034c3 Third Party Advisory
- https://git.kernel.org/stable/c/f4ee84f27625ce1fdf41e8483fa0561a1b837d10 Third Party Advisory
Severity
6.8
Medium
Timeline
Published30 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta