5.5
Medium
CVE-2023-28328 A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel
Description
A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.2 | earliest → < 6.2 | 6.2 |
References
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update lists.debian.org
- [debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of Linux
The 7 CVEs of Linux →
CVE-2023-2177
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel
5.5
Medium
CVE-2023-28327
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux…
5.5
Medium
CVE-2023-2166
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux
5.5
Medium
CVE-2023-1990
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel
4.7
Medium