CVE-2023-54284

CVE-2023-54284 affects the Linux kernel (media: av7110) where the length passed to av7110_ipack_instant_repack() could become negative due to user-controlled ts_play() data (buf[4]). The fix adds bounds checking so that len = len - (buf[4] + 1) - 4 cannot underflow, and removes the previous if (!...

CVE-2023-54284 media: av7110: prevent underflow in write_ts_to_decoder()

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The buf4 value comes from the user via tsplay. It is a value in the u8 range. The final length we pass to av7110ipackinstantrepack is "len - buf4 + 1 - 4" so add a check to...