CVE-2023-52915

A NULL pointer dereference vulnerability was found in the af9035_i2c_master_xfer function of the dvb-usb-v2 driver in the Linux kernel. This issue occurred because the function did not adequately check the msg[i].buf and msg[i].len fields, allowing a NULL pointer dereference if msg[i].buf was NULL and msg[i].len was zero. The fix introduces a sanity check on msg[i].len to prevent such crashes by ensuring the buffer is valid before accessing its contents.

This vulnerability is classified as a Moderate severity rather than Important due to its specific conditions and impact. The NULL pointer dereference in af9035_i2c_master_xfer requires both msg[i].buf to be NULL and msg[i].len to be zero for exploitation, which limits its exploitation to cases where these conditions are met. Furthermore, while it can cause a denial of service (crash) when accessing invalid memory, it does not directly lead to arbitrary code execution or data corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.