CVE-2023-53146
published 2025-05-14CVE-2023-53146: In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
6.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf
is null and msg[i].len is zero, former checks on msg[i].buf would be
passed. Malicious data finally reach dw2102_i2c_transfer. If accessing
msg[i].buf[0] without sanity check, null ptr deref would happen.
We add check on msg[i].len to prevent crash.
Similar commit:
commit 950e252cb469
("[media] dw2102: limit messages to buffer size")
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < 77cbd42d29de9ffc93d5529bab8813cde53af14c | 77cbd42d29de9ffc93d5529bab8813cde53af14c |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < ecbe6d011b95c7da59f014f8d26cb7245ed1e11e | ecbe6d011b95c7da59f014f8d26cb7245ed1e11e |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < beb9550494e7349f92b9eaa283256a5ad9b1c9be | beb9550494e7349f92b9eaa283256a5ad9b1c9be |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < 97fdbdb750342cbc204befde976872fedb406ee6 | 97fdbdb750342cbc204befde976872fedb406ee6 |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < 903566208ae6bb9c0e7e54355ce75bf6cf72485d | 903566208ae6bb9c0e7e54355ce75bf6cf72485d |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < 08dfcbd03b2b7f918c4f87c6ff637054e510df74 | 08dfcbd03b2b7f918c4f87c6ff637054e510df74 |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < fb28afab113a82b89ffec48c8155ec05b4f8cb5e | fb28afab113a82b89ffec48c8155ec05b4f8cb5e |
| linux | linux | >= 7fd4828f6cc5bd4339ff58e372ccb5f528548b30 < 5ae544d94abc8ff77b1b9bf8774def3fa5689b5b | 5ae544d94abc8ff77b1b9bf8774def3fa5689b5b |
| linux | linux_kernel | < 4.14.326 | 4.14.326 |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 4.15 < 4.19.295 | 4.19.295 |
| linux | linux_kernel | >= 4.20 < 5.4.257 | 5.4.257 |
| linux | linux_kernel | >= 5.11 < 5.15.133 | 5.15.133 |
| linux | linux_kernel | >= 5.16 < 6.1.55 | 6.1.55 |
| linux | linux_kernel | >= 5.5 < 5.10.197 | 5.10.197 |
| linux | linux_kernel | >= 6.2 < 6.5.5 | 6.5.5 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-53146: In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer,
osv·2025-05-14·CVSS 5.5
CVE-2023-53146 [MEDIUM] CVE-2023-53146: In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer,
In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach dw2102_i2c_transfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 950e252cb469 ("[media] dw2102: limit messages to buffer size")
GHSA
GHSA-7gp9-jx5j-42cf: In the Linux kernel, the following vulnerability has been resolved:
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
In dw2102_i2c_transfe
ghsa_unreviewed·2025-05-14
CVE-2023-53146 [MEDIUM] CWE-476 GHSA-7gp9-jx5j-42cf: In the Linux kernel, the following vulnerability has been resolved:
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
In dw2102_i2c_transfe
In the Linux kernel, the following vulnerability has been resolved:
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf
is null and msg[i].len is zero, former checks on msg[i].buf would be
passed. Malicious data finally reach dw2102_i2c_transfer. If accessing
msg[i].buf[0] without sanity check, null ptr deref would happen.
We add check on msg[i].len to prevent crash.
Similar commit:
commit 950e252cb469
("[media] dw2102: limit messages to buffer size")
Red Hat
kernel: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
vendor_redhat·2025-05-14·CVSS 5.5
CVE-2023-53146 [MEDIUM] kernel: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
kernel: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
In the Linux kernel, the following vulnerability has been resolved:
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf
is null and msg[i].len is zero, former checks on msg[i].buf would be
passed. Malicious data finally reach dw2102_i2c_transfer. If accessing
msg[i].buf[0] without sanity check, null ptr deref would happen.
We add check on msg[i].len to prevent crash.
Similar commit:
commit 950e252cb469
("[media] dw2102: limit messages to buffer size")
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package:
Debian
CVE-2023-53146: linux - In the Linux kernel, the following vulnerability has been resolved: media: dw21...
vendor_debian·2023·CVSS 5.5
CVE-2023-53146 [MEDIUM] CVE-2023-53146: linux - In the Linux kernel, the following vulnerability has been resolved: media: dw21...
In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach dw2102_i2c_transfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 950e252cb469 ("[media] dw2102: limit messages to buffer size")
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/08dfcbd03b2b7f918c4f87c6ff637054e510df74https://git.kernel.org/stable/c/5ae544d94abc8ff77b1b9bf8774def3fa5689b5bhttps://git.kernel.org/stable/c/77cbd42d29de9ffc93d5529bab8813cde53af14chttps://git.kernel.org/stable/c/903566208ae6bb9c0e7e54355ce75bf6cf72485dhttps://git.kernel.org/stable/c/97fdbdb750342cbc204befde976872fedb406ee6https://git.kernel.org/stable/c/beb9550494e7349f92b9eaa283256a5ad9b1c9behttps://git.kernel.org/stable/c/ecbe6d011b95c7da59f014f8d26cb7245ed1e11ehttps://git.kernel.org/stable/c/fb28afab113a82b89ffec48c8155ec05b4f8cb5e
2025-05-14
Published