PT-2023-9432 · Linux+4 · Linux Kernel+4
Zhang Shurong
·
Published
2023-07-19
·
Updated
2025-02-03
·
CVE-2023-52915
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.4
Description
The issue is related to a null pointer dereference in the
af9035 i2c master xfer function. In this function, msg is controlled by the user, and when msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed, allowing malicious data to reach af9035 i2c master xfer. If msg[i].buf[0] is accessed without a sanity check, a null pointer dereference would occur. A check on msg[i].len has been added to prevent the crash.Recommendations
To resolve the issue, upgrade the Linux kernel to a version newer than 6.5.4. As a temporary workaround, consider restricting access to the
af9035 i2c master xfer function until a patch is available.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse