The Linux kernel's dvb-usb dtv5100 driver contained a vulnerability where the dtv5100_i2c_msg() function did not validate the user-controlled rlen parameter against the size of the st->data buffer. This lack of bounds checking could lead to an out-of-bounds memory write, potentially causing memory corruption with high impact on confidentiality, integrity, and availability. The vulnerability has been resolved by adding appropriate range checks on the rlen value.

Exploitation of this vulnerability could allow a local attacker with limited privileges to cause memory corruption, leading to potential privilege escalation or denial of service. The CVSS vector indicates local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

A fix has been applied to the Linux kernel to add proper range checking for the rlen parameter in dtv5100_i2c_msg(). Users and administrators should update to the latest patched kernel versions that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, verify with the official Linux kernel advisories or vendor updates for the exact patched versions and apply them accordingly.