CVE-2025-38693: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090ptunerwriteserpar and w7090ptunerreadserpar
In w7090ptunerwriteserpar, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash.
Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027i2cxfer()")
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38693?
CVE-2025-38693 is classified as a medium severity vulnerability.
How do I fix CVE-2025-38693?
To fix CVE-2025-38693, update your Linux kernel to the latest version where this vulnerability has been patched.
Who is affected by CVE-2025-38693?
CVE-2025-38693 affects users using the Linux kernel with the dvb-frontends component, specifically concerning the w7090p tuner.
What type of vulnerability is CVE-2025-38693?
CVE-2025-38693 is a null pointer dereference vulnerability within the Linux kernel.
What are the potential impacts of CVE-2025-38693?
Exploitation of CVE-2025-38693 could lead to application crashes or unexpected behavior due to dereferencing a null pointer.