CVE-2025-38693

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_serpar, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash. Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

• linux linux kernel (>= 2.6.39 < 5.4.297) • linux linux kernel (>= 5.5 < 5.10.241) • linux linux kernel (>= 5.11 < 5.15.190) • linux linux kernel (>= 5.16 < 6.1.149) • linux linux kernel (>= 6.2 < 6.6.103) • linux linux kernel (>= 6.7 < 6.12.43) • linux linux kernel (>= 6.13 < 6.15.11) • linux linux kernel (>= 6.16 < 6.16.2) • debian debian linux 11.0