https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:47:47 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53458 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()</p> <p>When the driver calls cx23885_risc_buffer() to prepare the buffer, the function call dma_alloc_coherent may fail, resulting in a empty buffer risc-&gt;cpu. Later when we free the buffer or access the buffer, null ptr deref is triggered.</p> <p>This bug is similar to the following one: https://git.linuxtv.org/media_stage.git/commit/?id=2b064d91440b33fba5b452f2d1b31f13ae911d71.</p> <p>We believe the bug can be also dynamically triggered from user side. Similarly, we fix this by checking the return value of cx23885_risc_buffer() and the value of risc-&gt;cpu before buffer free.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()</p> <p>When the driver calls cx23885_risc_buffer() to prepare the buffer, the function call dma_alloc_coherent may fail, resulting in a empty buffer risc-&gt;cpu. Later when we free the buffer or access the buffer, null ptr deref is triggered.</p> <p>This bug is similar to the following one: https://git.linuxtv.org/media_stage.git/commit/?id=2b064d91440b33fba5b452f2d1b31f13ae911d71.</p> <p>We believe the bug can be also dynamically triggered from user side. Similarly, we fix this by checking the return value of cx23885_risc_buffer() and the value of risc-&gt;cpu before buffer free.</p> https://vulnerability.circl.lu/vuln/cve-2023-53458