Non notée
CVE-2025-38693 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Description
In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_serpar, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.17 | premières → < 6.17 | 6.17 |
| Linux 6.16 | premières → < 6.16.2 | 6.16.2 |
| Linux 6.15 | premières → < 6.15.11 | 6.15.11 |
| Linux 6.12 | premières → < 6.12.43 | 6.12.43 |
| Linux 6.6 | premières → < 6.6.103 | 6.6.103 |
| Linux 6.1 | premières → < 6.1.149 | 6.1.149 |
| Linux 5.15 | premières → < 5.15.190 | 5.15.190 |
| Linux 5.10 | premières → < 5.10.241 | 5.10.241 |
| Linux 5.4 | premières → < 5.4.297 | 5.4.297 |
Afficher les 2 autres branches Masquer les 2 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux | 2.6.39 | Pas de correctif indiqué |
| SIMATIC CN 4100 5.0 | premières → < 5.0 | 5.0 |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée