CVE-2023-54093media: anysee: fix null-ptr-deref in anysee_master_xfer
- —Not scoredno CVSS score yet
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()") [hverkuil: add spaces around +]
Timeline
ID reserved
By Linux
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < 73c0b224ceeba12dee2a7a8cbc147648da0b2e63
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < e04affec2506ff5c12a18d78d7e694b3556a8982
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < 8dc5b370254abc10f0cb4141d90cecf7ce465472
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < 4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < 3dd5846a873938ec7b6d404ec27662942cd8f2ef
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < 14b94154a72388b57221a2a73795c0ea61a95373
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < 5975dbbb7ad0767eaabd15d2c37a739ac76acb00
- affected a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b – < c30411266fd67ea3c02a05c157231654d5a3bdc9
- affected 2.6.27
- unaffected < 2.6.27
- unaffected 4.14.326 – ≤ 4.14.*
- unaffected 4.19.295 – ≤ 4.19.*
- unaffected 5.4.257 – ≤ 5.4.*
- unaffected 5.10.197 – ≤ 5.10.*
- unaffected 5.15.133 – ≤ 5.15.*
- unaffected 6.1.55 – ≤ 6.1.*
- unaffected 6.5.5 – ≤ 6.5.*
- unaffected 6.6 – ≤ *
References
References8
- https://git.kernel.org/stable/c/73c0b224ceeba12dee2a7a8cbc147648da0b2e63 (opens in a new tab)
- https://git.kernel.org/stable/c/e04affec2506ff5c12a18d78d7e694b3556a8982 (opens in a new tab)
- https://git.kernel.org/stable/c/8dc5b370254abc10f0cb4141d90cecf7ce465472 (opens in a new tab)
- https://git.kernel.org/stable/c/4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac (opens in a new tab)
- https://git.kernel.org/stable/c/3dd5846a873938ec7b6d404ec27662942cd8f2ef (opens in a new tab)
- https://git.kernel.org/stable/c/14b94154a72388b57221a2a73795c0ea61a95373 (opens in a new tab)
- https://git.kernel.org/stable/c/5975dbbb7ad0767eaabd15d2c37a739ac76acb00 (opens in a new tab)
- https://git.kernel.org/stable/c/c30411266fd67ea3c02a05c157231654d5a3bdc9 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2023-60352 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2023-54093)Record last updated .