{"schema_version":"1.9.0","id":"CVE-2023-53458","published":"2025-10-01T11:42:29.665Z","modified":"2026-08-12T03:51:41.812162146Z","related":["SUSE-SU-2025:03615-1","SUSE-SU-2025:03628-1","SUSE-SU-2025:3716-1","SUSE-SU-2025:3761-1"],"summary":"media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()\n\nWhen the driver calls cx23885_risc_buffer() to prepare the buffer, the\nfunction call dma_alloc_coherent may fail, resulting in a empty buffer\nrisc->cpu. Later when we free the buffer or access the buffer, null ptr\nderef is triggered.\n\nThis bug is similar to the following one:\nhttps://git.linuxtv.org/media_stage.git/commit/?id=2b064d91440b33fba5b452f2d1b31f13ae911d71.\n\nWe believe the bug can be also dynamically triggered from user side.\nSimilarly, we fix this by checking the return value of cx23885_risc_buffer()\nand the value of risc->cpu before buffer free.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4d63a25c4523b5d18e5307897d56aff785f43bf5"},{"fixed":"f0a06203f2fe63f04311467200c99c4ee1926578"},{"fixed":"6738841f6fcf23e9fc30e2449f32fc84ee19c6f1"},{"fixed":"5b8e5e28e85a546dfccc3895befe0e823fdd7c89"},{"fixed":"47e8b73bc35d7c54642f78e498697692f6358996"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53458.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.18.0"},{"fixed":"5.15.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.30"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53458.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/47e8b73bc35d7c54642f78e498697692f6358996"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5b8e5e28e85a546dfccc3895befe0e823fdd7c89"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6738841f6fcf23e9fc30e2449f32fc84ee19c6f1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f0a06203f2fe63f04311467200c99c4ee1926578"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53458.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53458"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53458.json"}}