Wind River Support Network

HomeDefectsLIN1021-5427
Acknowledged

LIN1021-5427 : Security Advisory - linux - CVE-2023-28328

Created: Mar 14, 2023    Updated: Apr 20, 2023
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.

https://nvd.nist.gov/vuln/detail/CVE-2023-28328
Live chat
Online