Home

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.

PUBLISHED Reserved 2025-12-30 | Published 2025-12-30 | Updated 2025-12-30 | Assigner Linux

Product status

Default status
unaffected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before 7776591e5ae2befff86579f68916a171971c6aab
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before 751b2e22a188b0c306029d094da29b6b8de31430
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before 653fbddbdfc6673bba01b13dae5a4384ad8f92ec
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before 75f2de75c1182e80708c932418e4895dbc88b68f
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before 072324cfab9b96071c0782f51f53cc5aea1e9d5b
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before ff5faed5f5487b0fd2b640ba1304f82a5ebaab42
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before fe0195fe48f85182bc7e7eabcad925bd3cbc10f5
affected

7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd (git) before e4c79810755f66c9a933ca810da2724133b1165a
affected

Default status
affected

4.9
affected

Any version before 4.9
unaffected

4.14.326 (semver)
unaffected

4.19.295 (semver)
unaffected

5.4.257 (semver)
unaffected

5.10.195 (semver)
unaffected

5.15.132 (semver)
unaffected

6.1.54 (semver)
unaffected

6.5.4 (semver)
unaffected

6.6 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/7776591e5ae2befff86579f68916a171971c6aab

git.kernel.org/...c/751b2e22a188b0c306029d094da29b6b8de31430

git.kernel.org/...c/653fbddbdfc6673bba01b13dae5a4384ad8f92ec

git.kernel.org/...c/75f2de75c1182e80708c932418e4895dbc88b68f

git.kernel.org/...c/072324cfab9b96071c0782f51f53cc5aea1e9d5b

git.kernel.org/...c/ff5faed5f5487b0fd2b640ba1304f82a5ebaab42

git.kernel.org/...c/fe0195fe48f85182bc7e7eabcad925bd3cbc10f5

git.kernel.org/...c/e4c79810755f66c9a933ca810da2724133b1165a

cve.org (CVE-2023-54240)

nvd.nist.gov (CVE-2023-54240)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.