CVE-2023-54240
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 30, 2025
First seenDec 30, 2025
How to fix
Update
- Linux Linux7776591e5ae2befff86579f68916a171971c6aab, 751b2e22a188b0c306029d094da29b6b8de31430, 653fbddbdfc6673bba01b13dae5a4384ad8f92ec, 75f2de75c1182e80708c932418e4895dbc88b68f, 072324cfab9b96071c0782f51f53cc5aea1e9d5b, ff5faed5f5487b0fd2b640ba1304f82a5ebaab42, fe0195fe48f85182bc7e7eabcad925bd3cbc10f5, e4c79810755f66c9a933ca810da2724133b1165a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < 7776591e5ae2befff86579f68916a171971c6aab, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < 751b2e22a188b0c306029d094da29b6b8de31430, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < 653fbddbdfc6673bba01b13dae5a4384ad8f92ec, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < 75f2de75c1182e80708c932418e4895dbc88b68f, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < 072324cfab9b96071c0782f51f53cc5aea1e9d5b, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < ff5faed5f5487b0fd2b640ba1304f82a5ebaab42, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < fe0195fe48f85182bc7e7eabcad925bd3cbc10f5, 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd ≤ v < e4c79810755f66c9a933ca810da2724133b1165a, 4.9 | 7776591e5ae2befff86579f68916a171971c6aab, 751b2e22a188b0c306029d094da29b6b8de31430, 653fbddbdfc6673bba01b13dae5a4384ad8f92ec, 75f2de75c1182e80708c932418e4895dbc88b68f, 072324cfab9b96071c0782f51f53cc5aea1e9d5b, ff5faed5f5487b0fd2b640ba1304f82a5ebaab42, fe0195fe48f85182bc7e7eabcad925bd3cbc10f5, e4c79810755f66c9a933ca810da2724133b1165a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.