What’s Vulnerable › Vulnerabilities

CVE-2023-53495: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-08-04
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.

Affected products

• Linux kernel: from 5.2 before 5.4.257; from 5.5 before 5.10.195; from 5.11 before 5.15.132; from 5.16 before 6.1.54; from 6.2 before 6.5.4; 6.6-rc1 — fixed in 5.10.195, 5.15.132, 5.4.257, 6.1.54, 6.5.4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.195, 5.15.132, 5.4.257, 6.1.54. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/349638f7e5d3c7d328565587bb7b0454bbee02e2
• https://git.kernel.org/stable/c/51fe0a470543f345e3c62b6798929de3ddcedc1d
• https://git.kernel.org/stable/c/5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8
• https://git.kernel.org/stable/c/61054a8ddb176b155a8f2bacdfefb3727187f5d9
• https://git.kernel.org/stable/c/625b70d31dd4df4b96b3ddcbe251debb33bd67f5
• https://git.kernel.org/stable/c/ba6673824efa3dc198b04a54e69dce480066d7d9

Get alerted when CVE-2023-53495 or the next vulnerability affects your stack