Linux Kernel Null Pointer Dereference Vulnerability in dw2102 Media Driver

A null pointer dereference vulnerability has been identified in the Linux kernel's media dw2102 driver. The issue arises in the dw2102_i2c_transfer function, where the 'msg' parameter is user-controlled. If 'msg[i].buf' is null and 'msg[i].len' is zero, the existing checks on 'msg[i].buf' would be bypassed, allowing malicious data to reach the function. Without proper validation, accessing 'msg[i].buf[0]' could lead to a null pointer dereference, causing a crash. The vulnerability has been addressed by adding a check on 'msg[i].len' to prevent such crashes.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a crash.