Linux Kernel Out-of-Bounds Read Vulnerability in MTK Ethernet Driver

An out-of-bounds read vulnerability has been identified in the Linux kernel's MTK Ethernet driver. The issue arises in the 'mtk_hwlro_get_fdir_entry()' function, where the 'fsp->location' variable, sourced from user input via 'ethtool_get_rxnfc()', is not properly validated. This lack of validation allows for the out-of-bounds read condition to occur.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be used to read sensitive information from memory or cause a denial-of-service condition by crashing the system.