CVE-2023-53146

Advisory lineage Upstream: 0 Downstream: 13
Analyzed
Published: 14 May 2025, 12:43
Last modified:11 May 2026, 19:39

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.06% LOW
0% probability +0.04%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 May 2025, 12:43
Published
Vulnerability first disclosed
11 May 2026, 19:39
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach dw2102_i2c_transfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 950e252cb469 ("[media] dw2102: limit messages to buffer size")

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.06%• Percentile: 17%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < 77cbd42d29de9ffc93d5529bab8813cde53af14c | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < ecbe6d011b95c7da59f014f8d26cb7245ed1e11e | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < beb9550494e7349f92b9eaa283256a5ad9b1c9be | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < 97fdbdb750342cbc204befde976872fedb406ee6 | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < 903566208ae6bb9c0e7e54355ce75bf6cf72485d | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < 08dfcbd03b2b7f918c4f87c6ff637054e510df74 | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < fb28afab113a82b89ffec48c8155ec05b4f8cb5e | ≥ 7fd4828f6cc5bd4339ff58e372ccb5f528548b30, < 5ae544d94abc8ff77b1b9bf8774def3fa5689b5b | 2.6.27

  • linux•linux_kernel

    < 4.14.326 | ≥ 4.15, < 4.19.295 | ≥ 4.20, < 5.4.257 | ≥ 5.5, < 5.10.197 | ≥ 5.11, < 5.15.133 | ≥ 5.16, < 6.1.55 | ≥ 6.2, < 6.5.5

References (8)