PT-2025-54130 · Linux+1 · Linux Kernel+1

Published 2023-03-19 · Updated 2026-02-24 · CVE-2023-54284

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel related to the av7110 driver, specifically within the write ts to decoder() function. The buf[4] value, originating from user input through the ts play() function, is used in a length calculation for av7110 ipack instant repack(). Without proper bounds checking, this calculation could result in a negative length value, potentially leading to an underflow. The fix introduces a check to ensure the calculated length is not negative. The unnecessary "if (!len)" condition was also removed as a result of the bounds checking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-04173

CVE-2023-54284

OESA-2026-1340

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

Av7110

References · 993

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54284.json · Exploit
• https://osv.dev/vulnerability/OESA-2026-1340 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54284 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68285 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54284 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54284 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54284 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54284 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40018 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23003 · Security Note
• https://bdu.fstec.ru/vul/2026-04173 · Security Note
• https://ubuntu.com/security/CVE-2023-54284 · Vendor Advisory