CVE-2023-54240
published 2025-12-30CVE-2023-54240: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in…
PriorityP420
EPSS
0.18%
8.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rule_locs to avoid NULL pointer dereference.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < 7776591e5ae2befff86579f68916a171971c6aab | 7776591e5ae2befff86579f68916a171971c6aab |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < 751b2e22a188b0c306029d094da29b6b8de31430 | 751b2e22a188b0c306029d094da29b6b8de31430 |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < 653fbddbdfc6673bba01b13dae5a4384ad8f92ec | 653fbddbdfc6673bba01b13dae5a4384ad8f92ec |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < 75f2de75c1182e80708c932418e4895dbc88b68f | 75f2de75c1182e80708c932418e4895dbc88b68f |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < 072324cfab9b96071c0782f51f53cc5aea1e9d5b | 072324cfab9b96071c0782f51f53cc5aea1e9d5b |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < ff5faed5f5487b0fd2b640ba1304f82a5ebaab42 | ff5faed5f5487b0fd2b640ba1304f82a5ebaab42 |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < fe0195fe48f85182bc7e7eabcad925bd3cbc10f5 | fe0195fe48f85182bc7e7eabcad925bd3cbc10f5 |
| linux | linux | >= 7aab747e5563ecbc9f3cb64ddea13fe7b9fee2bd < e4c79810755f66c9a933ca810da2724133b1165a | e4c79810755f66c9a933ca810da2724133b1165a |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 4.15.0 < 4.19.295 | 4.19.295 |
| linux | linux_kernel | >= 4.20.0 < 5.4.257 | 5.4.257 |
| linux | linux_kernel | >= 4.9.0 < 4.14.326 | 4.14.326 |
| linux | linux_kernel | >= 5.11.0 < 5.15.132 | 5.15.132 |
| linux | linux_kernel | >= 5.16.0 < 6.1.54 | 6.1.54 |
| linux | linux_kernel | >= 5.5.0 < 5.10.195 | 5.10.195 |
| linux | linux_kernel | >= 6.2.0 < 6.5.4 | 6.5.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
vendor_redhat·2025-12-30
CVE-2023-54240 kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rule_locs to avoid NULL pointer dereference.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterpris
Debian
CVE-2023-54240: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern...
vendor_debian·2023
CVE-2023-54240 CVE-2023-54240: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern...
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1)
VulDB
Linux Kernel up to 6.5.3 net mtk_hwlro_get_fdir_all null pointer dereference (Nessus ID 281707 / WID-SEC-2025-2941)
vuldb·2026-04-27
CVE-2023-54240 [CRITICAL] Linux Kernel up to 6.5.3 net mtk_hwlro_get_fdir_all null pointer dereference (Nessus ID 281707 / WID-SEC-2025-2941)
A vulnerability classified as critical was found in Linux Kernel up to 6.5.3. The affected element is the function mtk_hwlro_get_fdir_all of the component net. The manipulation results in null pointer dereference.
This vulnerability is reported as CVE-2023-54240. The attacker must have access to the local network to execute the attack. No exploit exists.
Upgrading the affected component is advised.
OSV
CVE-2023-54240: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get
osv·2025-12-30
CVE-2023-54240 CVE-2023-54240: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.
GHSA
GHSA-74c5-8qvv-vrf8: In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_ge
ghsa_unreviewed·2025-12-30
CVE-2023-54240 GHSA-74c5-8qvv-vrf8: In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_ge
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rule_locs to avoid NULL pointer dereference.
OSV
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
osv·2025-12-30
CVE-2023-54240 net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rule_locs to avoid NULL pointer dereference.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54240 kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
bugzilla·2025-12-30
CVE-2023-54240 CVE-2023-54240 kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
CVE-2023-54240 kernel: net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rule_locs to avoid NULL pointer dereference.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123033-CVE-2023-54240-b9f8@gregkh/T
Wiz
CVE-2023-54240 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54240 CVE-2023-54240 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54240 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by
rule_cnt from user space. So rule_cnt needs to be check before using
rule_locs to avoid NULL pointer dereference.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
dtb-xilinx
kernel-livepatch-6_4_0-150600_23_84-
https://git.kernel.org/stable/c/072324cfab9b96071c0782f51f53cc5aea1e9d5bhttps://git.kernel.org/stable/c/653fbddbdfc6673bba01b13dae5a4384ad8f92echttps://git.kernel.org/stable/c/751b2e22a188b0c306029d094da29b6b8de31430https://git.kernel.org/stable/c/75f2de75c1182e80708c932418e4895dbc88b68fhttps://git.kernel.org/stable/c/7776591e5ae2befff86579f68916a171971c6aabhttps://git.kernel.org/stable/c/e4c79810755f66c9a933ca810da2724133b1165ahttps://git.kernel.org/stable/c/fe0195fe48f85182bc7e7eabcad925bd3cbc10f5https://git.kernel.org/stable/c/ff5faed5f5487b0fd2b640ba1304f82a5ebaab42
2025-12-30
Published