CVE-2025-38693 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090ptunerwriteserpar and w7090ptunerreadserpar In w7090ptunerwriteserpar, msg is controlled by user. When msg0.buf is null and msg0.len is zero, former checks on msg0.buf woul...

Linux Distros Unpatched Vulnerability : CVE-2021-22222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file CVE-2021-22222 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-45919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvbcaen50221.c, a use-after-free can occur is there is a disconnect after ...

Linux Distros Unpatched Vulnerability : CVE-2024-24864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition was found in the Linux kernel's media/dvb-core in dvbdmxwrite function. This can result in a null pointer dereference issue, possibly leading t...

SUSE CVE-2025-38229

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. 1 Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...

DEBIAN-CVE-2025-38229

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. 1 Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...

AZL-64773 CVE-2025-38229 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. 1 Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...

UBUNTU-CVE-2025-38229

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. 1 Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...

PT-2025-28004

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the media component, specifically the cxusb module. The issue occurred when the write operation of usb bulk msg in dvb...

CVE-2025-25038

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to...

Vulnerability of the lgdt3306a_probe() function in the module drivers/media/dvb-frontends/lgdt3306a.c – A driver for supporting multimedia devices in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the lgdt3306aprobe function in the drivers/media/dvb-frontends/lgdt3306a.c module – Linux’s multimedia device support driver framework – is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `cx24116_read_snr_pct()` function in the `drivers/media/dvb-frontends/cx24116.c` file of the Linux kernel allows a hacker to execute arbitrary code.

The vulnerability of the cx24116readsnrpct function in the drivers/media/dvb-frontends/cx24116.c file of the Linux kernel is related to a numerical loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerabilities of the functions DECLARE_RWSEM() and dvb_register_device() in the drivers/media/dvb-core/dvbdev.c module of the Linux kernel allow a hacker to cause a service failure.

The vulnerabilities of the functions DECLARERWSEM and dvbregisterdevice in the drivers/media/dvb-core/dvbdev.c module of the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

Vulnerability of the dvb-media-device-free() function in the drivers/media/dvb-core/dvbdev.c module – a driver for supporting multimedia devices in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the dvb-media-device-free function in the drivers/media/dvb-core/dvbdev.c module – The Linux kernel’s multimedia device support driver is vulnerable to a memory leak issue, where memory is not properly freed after the last reference to a pointer is removed. Exploiting this...

media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg

...

dvb-t2hd.de Cross Site Scripting vulnerability OBB-4030853

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AZL-57793 CVE-2024-57834 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtvmuxstopthread syzbot report a null-ptr-deref in vidtvmuxstopthread. 1 If dvb-mux is not initialized successfully by vidtvmuxinit in the vidtvstartstreaming, it will trigger null pointer...

DEBIAN-CVE-2024-57834

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtvmuxstopthread syzbot report a null-ptr-deref in vidtvmuxstopthread. 1 If dvb-mux is not initialized successfully by vidtvmuxinit in the vidtvstartstreaming, it will trigger null pointer...

UBUNTU-CVE-2024-57834

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtvmuxstopthread syzbot report a null-ptr-deref in vidtvmuxstopthread. 1 If dvb-mux is not initialized successfully by vidtvmuxinit in the vidtvstartstreaming, it will trigger null pointer...

SUSE CVE-2024-24864

A race condition was found in the Linux kernel's media/dvb-core in dvbdmxwrite function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue...