CVE-2023-53146

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53146
In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach dw2102_i2c_transfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 950e252cb469 ("[media] dw2102: limit messages to buffer size")

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/08dfcbd03b2b7f918c4f87c6ff637054e510df74 Patch
https://git.kernel.org/stable/c/5ae544d94abc8ff77b1b9bf8774def3fa5689b5b Patch
https://git.kernel.org/stable/c/77cbd42d29de9ffc93d5529bab8813cde53af14c Patch
https://git.kernel.org/stable/c/903566208ae6bb9c0e7e54355ce75bf6cf72485d Patch
https://git.kernel.org/stable/c/97fdbdb750342cbc204befde976872fedb406ee6 Patch
https://git.kernel.org/stable/c/beb9550494e7349f92b9eaa283256a5ad9b1c9be Patch
https://git.kernel.org/stable/c/ecbe6d011b95c7da59f014f8d26cb7245ed1e11e Patch
https://git.kernel.org/stable/c/fb28afab113a82b89ffec48c8155ec05b4f8cb5e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 Nov 2025, 20:37

Type Values Removed Values Added
CWE CWE-476
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/08dfcbd03b2b7f918c4f87c6ff637054e510df74 - () https://git.kernel.org/stable/c/08dfcbd03b2b7f918c4f87c6ff637054e510df74 - Patch
References () https://git.kernel.org/stable/c/5ae544d94abc8ff77b1b9bf8774def3fa5689b5b - () https://git.kernel.org/stable/c/5ae544d94abc8ff77b1b9bf8774def3fa5689b5b - Patch
References () https://git.kernel.org/stable/c/77cbd42d29de9ffc93d5529bab8813cde53af14c - () https://git.kernel.org/stable/c/77cbd42d29de9ffc93d5529bab8813cde53af14c - Patch
References () https://git.kernel.org/stable/c/903566208ae6bb9c0e7e54355ce75bf6cf72485d - () https://git.kernel.org/stable/c/903566208ae6bb9c0e7e54355ce75bf6cf72485d - Patch
References () https://git.kernel.org/stable/c/97fdbdb750342cbc204befde976872fedb406ee6 - () https://git.kernel.org/stable/c/97fdbdb750342cbc204befde976872fedb406ee6 - Patch
References () https://git.kernel.org/stable/c/beb9550494e7349f92b9eaa283256a5ad9b1c9be - () https://git.kernel.org/stable/c/beb9550494e7349f92b9eaa283256a5ad9b1c9be - Patch
References () https://git.kernel.org/stable/c/ecbe6d011b95c7da59f014f8d26cb7245ed1e11e - () https://git.kernel.org/stable/c/ecbe6d011b95c7da59f014f8d26cb7245ed1e11e - Patch
References () https://git.kernel.org/stable/c/fb28afab113a82b89ffec48c8155ec05b4f8cb5e - () https://git.kernel.org/stable/c/fb28afab113a82b89ffec48c8155ec05b4f8cb5e - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

16 May 2025, 14:43

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: dw2102: Se ha corregido la corrección de null-ptr-deref en dw2102_i2c_transfer(). En dw2102_i2c_transfer, el usuario controla msg. Cuando msg[i].buf es nulo y msg[i].len es cero, se superan las comprobaciones previas de msg[i].buf. Los datos maliciosos finalmente llegan a dw2102_i2c_transfer. Si se accede a msg[i].buf[0] sin una comprobación de seguridad, se produce una corrección de ptr nula. Se ha añadido una comprobación de msg[i].len para evitar un fallo. Commit similar: commit 950e252cb469 ("[media] dw2102: limitar los mensajes al tamaño del búfer")

14 May 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-14 13:15

Updated : 2025-11-12 20:37

NVD link : CVE-2023-53146

Mitre link : CVE-2023-53146

CVE.ORG link : CVE-2023-53146

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference