PT-2025-54128 · Linux · Linux Kernel
Published
2023-07-25
·
Updated
2026-03-24
·
CVE-2023-54282
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue within the media subsystem, specifically in the tuners/qt1010 driver. The
BUG ON macro was unnecessarily used, causing confusion for the static analysis tool smatch. Replacing BUG ON with a standard error return resolves this issue. The vulnerable code is located in drivers/media/tuners/qt1010.c at line 350 within the qt1010 init() function. The issue relates to a potential buffer overflow in the i2c data buffer, where the size of the buffer (34) is equal to the index being accessed (34).Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel