The Linux kernel's ethtool utility had a vulnerability in its EEPROM Netlink fallback function (fallback_set_params()) where it only checked that the offset was less than the EEPROM length but did not verify that offset plus length remained within the EEPROM length. This incomplete bounds checking could lead to out-of-bounds reads or other unexpected behavior affecting drivers and device firmware. The ioctl equivalent function already enforced proper bounds checking. The fix added the missing offset plus length validation to the fallback path to mirror the ioctl behavior. Additionally, the fallback buffer allocation was changed from kmalloc() to zero-initialized allocation (zalloc) to avoid uninitialized data issues.

Improper bounds checking in the EEPROM reading fallback path could lead to out-of-bounds memory access, potentially causing unexpected behavior in device drivers and firmware. While no known exploits are reported, this could affect system stability or security depending on the driver and device firmware involved.

A fix has been implemented in the Linux kernel to add the missing offset plus length validation in the EEPROM Netlink fallback path and to zero-initialize buffers properly. Users should update to a Linux kernel version that includes this fix. Since this is a kernel vulnerability, applying the official kernel update from the vendor or distribution is the recommended remediation. Patch status is not explicitly confirmed here; check the vendor advisory or Linux kernel release notes for the exact fixed version.