VULNERABILITY INTELLIGENCE

CVE-2023-54240

EPSS probability0.21%
CISA KEVNot currently listed
Published2025-12-30
Last modified2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.

Primary references