CVE-2023-54240: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.

Affected products

• Linux Linux: from 4.9, before 4.14.326 (fixed in 4.14.326); from 4.15, before 4.19.295 (fixed in 4.19.295); from 4.20, before 5.4.257 (fixed in 5.4.257); from 5.5, before 5.10.195 (fixed in 5.10.195); from 5.11, before 5.15.132 (fixed in 5.15.132); from 5.16, before 6.1.54 (fixed in 6.1.54); …

Published 2025-12-30. Last modified 2026-06-17.