In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtkethsoc: fix possible NULL pointer dereference in mtkhwlrogetfdirall()
rulelocs is allocated in ethtoolgetrxnfc and the size is determined by rulecnt from user space. So rulecnt needs to be check before using rulelocs to avoid NULL pointer dereference.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54240.json"
}