BELL-CVE-2023-54284

Bulletin has no description...

CVE-2023-54284

CVE-2023-54284 : Linux kernel vulnerability in the media/av7110 path. The issue arises from underflow-prone length calculation in write_ts_to_decoder(), where buf[4] is user-controlled via ts_play(). The intended final length passed to av7110_ipack_instant_repack() is computed as len - (buf[4] + ...