In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
rule_locs is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rule_locs to avoid NULL pointer dereference.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-intel-iotgUpgrade linux-azure-fipsUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-gcp-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-kvmUpgrade linux-oracleUpgrade linuxUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-fipsUpgrade linux-azure-5.4Upgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linux-iotUpgrade linux-nvidia-tegraUpgrade linux-gcpUpgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linux-azure | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub