CVE-2023-52915

A NULL pointer dereference vulnerability was found in the af9035_i2c_master_xfer function of the dvb-usb-v2 driver in the Linux kernel. This issue occurred because the function did not adequately check the msg[i].buf and msg[i].len fields, allowing a NULL pointer dereference if msg[i].buf was NULL and msg[i].len was zero. The fix introduces a sanity check on msg[i].len to prevent such crashes by ensuring the buffer is valid before accessing its contents.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.