{
  "cveId": "CVE-2023-54284",
  "url": "https://patchblox.com/security/cve/CVE-2023-54284",
  "summary": "CVE-2023-54284 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-54284, released December 30, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  media: av7110: prevent underflow in write_ts_to_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  media: av7110: prevent underflow in write_ts_to_decoder()  The buf[4] value comes from the user via ts_play().  It is a value in the u8 range.  The final length we pass to av7110_ipack_instant_repack() is \u0022len - (buf[4] \u002B 1) - 4\u0022 so add a check to ensure that the length is not negative.  It\u0027s not clear that passing a negative len value does anything bad necessarily, but it\u0027s not best practice.  With the new bounds checking the \u0022if (!len)\u0022 condition is no longer possible or required so remove that.",
  "published": "2025-12-30T13:16:17Z",
  "severity": "high",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00157,
  "epssPercentile": 0.04891,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.37-1",
      "fix": "DEBIAN-CVE-2023-54284",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54284",
      "released": "2025-12-30T13:16:17Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-54284",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54284",
      "released": "2025-12-30T13:16:17Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-54284",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54284",
      "released": "2025-12-30T13:16:17Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}