Threats tagged 'ghsa-rmvm-8mw4-j874'

A vulnerability in the Linux kernel's mv88e6xxx driver allows improper handling of policy rule dumps via the ETHTOOL_GRXCLSRLALL ioctl. The function mv88e6xxx_get_rxnfc() incorrectly uses the caller's rule count as a write index, potentially causing buffer overflows or NULL pointer dereferences. This can be triggered by unprivileged users once an admin has installed policy rules. The issue has been resolved by bounding the policy rule dump by the caller's buffer size and stopping with an error if the limit is reached.