CVE-2023-53495

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()

rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.

This vulnerability does not affect Red Hat Enterprise Linux kernels, as the vulnerable code introduced in upstream Linux is not present in supported Red Hat products. In upstream systems where the Marvell MVPP2 network driver is active, the flaw poses a local denial of service or potential memory corruption risk during network flow classification requests via ethtool. Exploitation requires local administrative privileges, such as the CAP_NET_ADMIN capability, to interact with the device driver.