{"cve":"CVE-2023-54240","nvd":{"published":"2025-12-30T13:16:12.540","modified":"2026-06-17T06:47:04.483","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()\n\nrule_locs is allocated in ethtool_get_rxnfc and the size is determined by\nrule_cnt from user space. So rule_cnt needs to be check before using\nrule_locs to avoid NULL pointer dereference.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/072324cfab9b96071c0782f51f53cc5aea1e9d5b","https://git.kernel.org/stable/c/653fbddbdfc6673bba01b13dae5a4384ad8f92ec","https://git.kernel.org/stable/c/751b2e22a188b0c306029d094da29b6b8de31430","https://git.kernel.org/stable/c/75f2de75c1182e80708c932418e4895dbc88b68f","https://git.kernel.org/stable/c/7776591e5ae2befff86579f68916a171971c6aab"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:18:08.089039631+00:00"},"epss":{"cve":"CVE-2023-54240","score":0.00212,"percentile":0.11459,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}