CVE-2023-28328

2023-04-1900:00:00

CWE-476

redhat

www.cve.org

az6027 driver

null pointer dereference

local user

denial of service

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux Kernel prior to kernel 6.2 RC1",
        "versionType": "custom",
        "lessThan": "6.2"
      }
    ]
  }
]