CVE-2023-54066 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
A local attacker with physical access can cause a kernel crash in the GL861 DVB-USB driver by sending crafted I2C messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2023-54066?
CVE-2023-54066 is a vulnerability in Linux, published on 24 Dec 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
In gl861_i2c_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach gl861_i2c_master_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.
Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
Which versions are affected by CVE-2023-54066?
How do I fix CVE-2023-54066?
Apply the vendor's patch.
Is CVE-2023-54066 being exploited?
There is no known exploitation of CVE-2023-54066 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-54066, DEBIAN-CVE-2023-54066, GHSA-9qq8-wxc9-p23m, UBUNTU-CVE-2023-54066.