Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54240

net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 7776591e5ae2befff86579f68916a171971c6aabaffected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 751b2e22a188b0c306029d094da29b6b8de31430affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 653fbddbdfc6673bba01b13dae5a4384ad8f92ecaffected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 75f2de75c1182e80708c932418e4895dbc88b68faffected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < 072324cfab9b96071c0782f51f53cc5aea1e9d5baffected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < ff5faed5f5487b0fd2b640ba1304f82a5ebaab42affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < fe0195fe48f85182bc7e7eabcad925bd3cbc10f5affected
  • 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd to < e4c79810755f66c9a933ca810da2724133b1165aaffected

Linux Linux

Default version status: affected

  • 4.9affected
  • 0 to < 4.9unaffected
  • 4.14.326 to ≤ 4.14.*unaffected
  • 4.19.295 to ≤ 4.19.*unaffected
  • 5.4.257 to ≤ 5.4.*unaffected
  • 5.10.195 to ≤ 5.10.*unaffected
  • 5.15.132 to ≤ 5.15.*unaffected
  • 6.1.54 to ≤ 6.1.*unaffected
  • 6.5.4 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References