CVE-2023-53495

net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()

State: Published
Severity: 7.8 High
Published: Oct 1, 2025
Updated: Aug 5, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()

rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	90b509b39ac9b09be88eb641c7a3abd8de06b698 to before ba6673824efa3dc198b04a54e69dce480066d7d9Affected 90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 61054a8ddb176b155a8f2bacdfefb3727187f5d9Affected 90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8Affected 90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 349638f7e5d3c7d328565587bb7b0454bbee02e2Affected 90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 625b70d31dd4df4b96b3ddcbe251debb33bd67f5Affected 90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 51fe0a470543f345e3c62b6798929de3ddcedc1dAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.54 through 6.1.Not affected 6.5.4 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

90b509b39ac9b09be88eb641c7a3abd8de06b698 to before ba6673824efa3dc198b04a54e69dce480066d7d9Affected
90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 61054a8ddb176b155a8f2bacdfefb3727187f5d9Affected
90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8Affected
90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 349638f7e5d3c7d328565587bb7b0454bbee02e2Affected
90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 625b70d31dd4df4b96b3ddcbe251debb33bd67f5Affected
90b509b39ac9b09be88eb641c7a3abd8de06b698 to before 51fe0a470543f345e3c62b6798929de3ddcedc1dAffected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.54 through 6.1.*Not affected
6.5.4 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.