In the Linux kernel, the following vulnerability has been resolved:
media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
In az6007_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach az6007_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash.
Similar commit: commit 0ed554fd769a ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 14, 2025 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.4Upgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegraUpgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-awsUpgrade linux-nvidia-tegra-igxUpgrade linux-iotUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-lowlatency-hwe-5.15 | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub