In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
rules is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rules to avoid OOB writing or NULL pointer dereference.
References
Configurations
Configuration 1 (hide)
|
History
16 Jan 2026, 20:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/349638f7e5d3c7d328565587bb7b0454bbee02e2 - Patch | |
| References | () https://git.kernel.org/stable/c/51fe0a470543f345e3c62b6798929de3ddcedc1d - Patch | |
| References | () https://git.kernel.org/stable/c/5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8 - Patch | |
| References | () https://git.kernel.org/stable/c/61054a8ddb176b155a8f2bacdfefb3727187f5d9 - Patch | |
| References | () https://git.kernel.org/stable/c/625b70d31dd4df4b96b3ddcbe251debb33bd67f5 - Patch | |
| References | () https://git.kernel.org/stable/c/ba6673824efa3dc198b04a54e69dce480066d7d9 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-787 |
01 Oct 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-01 12:15
Updated : 2026-01-16 20:46
NVD link : CVE-2023-53495
Mitre link : CVE-2023-53495
CVE.ORG link : CVE-2023-53495
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-787
Out-of-bounds Write