Review reviewHigh

CVE-2023-53495

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.

CVSS: 7.8
EPSS: 0.15%
CISA KEV: Not listed
Published: 2025.10.01

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.15%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 90b509b39ac9b09be88eb641c7a3abd8de06b698 < ba6673824efa3dc198b04a54e69dce480066d7d9, >= 90b509b39ac9b09be88eb641c7a3abd8de06b698 < 61054a8ddb176b155a8f2bacdfefb3727187f5d9, >= 90b509b39ac9b09be88eb641c7a3abd8de06b698 < 5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8, >= 90b509b39ac9b09be88eb641c7a3abd8de06b698 < 349638f7e5d3c7d328565587bb7b0454bbee02e2, >= 90b509b39ac9b09be88eb641c7a3abd8de06b698 < 625b70d31dd4df4b96b3ddcbe251debb33bd67f5, >= 90b509b39ac9b09be88eb641c7a3abd8de06b698 < 51fe0a470543f345e3c62b6798929de3ddcedc1d, >= 5.2, >= 5.2 < 5.4.257, >= 5.5 < 5.10.195, >= 5.11 < 5.15.132, >= 5.16 < 6.1.54, >= 6.2 < 6.5.4, 6.6
Fixed versions: 5.4.257, 5.10.195, 5.15.132, 6.1.54, 6.5.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-787