Beveiligingsadvies
CVE-2023-53495
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.