Buffer overflow in Linux

CVE-2023-53495

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (5.0th percentile) — read the EPSS interpretation.