CVE-2023-54240
kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified