Not yet scoredPublished Dec 24, 2025

CVE-2023-54093media: anysee: fix null-ptr-deref in anysee_master_xfer

Updated under an hour ago (Oct 26, 2026, 8:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach anysee_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()") [hverkuil: add spaces around +]

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before 73c0b224ceeba12dee2a7a8cbc147648da0b2e63; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before e04affec2506ff5c12a18d78d7e694b3556a8982; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before 8dc5b370254abc10f0cb4141d90cecf7ce465472; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before 4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before 3dd5846a873938ec7b6d404ec27662942cd8f2ef; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before 14b94154a72388b57221a2a73795c0ea61a95373; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before 5975dbbb7ad0767eaabd15d2c37a739ac76acb00; from a51e34dd6080d8d5c9e95a4e0292cd4cb889a61b before c30411266fd67ea3c02a05c157231654d5a3bdc9	CNA record

References

References

https://git.kernel.org/stable/c/73c0b224ceeba12dee2a7a8cbc147648da0b2e63
https://git.kernel.org/stable/c/e04affec2506ff5c12a18d78d7e694b3556a8982
https://git.kernel.org/stable/c/8dc5b370254abc10f0cb4141d90cecf7ce465472
https://git.kernel.org/stable/c/4a9763d2bc4a6d6fab42555b9c0b2eefa32585ac
https://git.kernel.org/stable/c/3dd5846a873938ec7b6d404ec27662942cd8f2ef
https://git.kernel.org/stable/c/14b94154a72388b57221a2a73795c0ea61a95373
https://git.kernel.org/stable/c/5975dbbb7ad0767eaabd15d2c37a739ac76acb00
https://git.kernel.org/stable/c/c30411266fd67ea3c02a05c157231654d5a3bdc9

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.