PT-2022-6434 · Linux+8 · Linux Kernel+8

Wei Chen · Published 2022-11-18 · Updated 2025-12-01 · CVE-2023-28328

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dvb-usb/az6027.c. The issue arises because messages from user space are not properly checked before being transferred into the device. This flaw allows a local user to crash the system or potentially cause a denial of service. The vulnerability is related to the function az6027 i2c xfer() and is caused by a null pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2023:7077

ALT-PU-2023-1434

ALT-PU-2023-1539

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-26338

BDU:2023-01282

CESA-2023_6901

CESA-2023_7077

CVE-2023-28328

DLA-3403-1

DLA-3404-1

OESA-2023-1209

OESA-2023-1210

OESA-2023-1211

OESA-2023-1212

RHSA-2023:6901

RHSA-2023:7077

RHSA-2023_6901

RHSA-2023_7077

RHSA-2024:0575

RHSA-2024:0724

SUSE-SU-2023:1608-1

SUSE-SU-2023:1609-1

SUSE-SU-2023:1710-1

SUSE-SU-2023:1800-1

SUSE-SU-2023:1801-1

SUSE-SU-2023:1803-1

SUSE-SU-2023:1811-1

SUSE-SU-2023:1848-1

SUSE-SU-2023:1892-1

SUSE-SU-2023:1894-1

SUSE-SU-2023:2232-1

SUSE-SU-2023:2506-1

SUSE-SU-2023:2805-1

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4315-1

USN-5975-1

USN-5981-1

USN-5982-1

USN-5984-1

USN-5987-1

USN-5991-1

USN-6000-1

USN-6004-1

USN-6009-1

USN-6024-1

USN-6030-1

USN-6149-1

USN-6385-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Suse

Ubuntu

References · 1586

• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6024-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5984-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-28328 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20369 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3521 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1206 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0045 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-41218 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6149-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4139 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3903 · Vendor Advisory