CVE-2023-28328: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.

Affected products

• Linux Linux Kernel: before 6.2 (fixed in 6.2)
• Red Hat Enterprise Linux: version 8.0 only

Published 2023-04-19. Last modified 2026-06-17.