CVE-2023-53456
published 2025-10-01CVE-2023-53456: In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that qla4xxx parses nlattrs:
- qla4xxx_set_chap_entry()
- qla4xxx_iface_set_param()
- qla4xxx_sysfs_ddb_set_param()
and each of them directly converts the nlattr to specific pointer of
structure without length checking. This could be dangerous as those
attributes are not validated and a malformed nlattr (e.g., length 0) could
result in an OOB read that leaks heap dirty data.
Add the nla_len check before accessing the nlattr data and return EINVAL if
the length check fails.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < cfa6a1a79ed6d336fac7a5d87eb5471e4401829f | cfa6a1a79ed6d336fac7a5d87eb5471e4401829f |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < 5925e224cc6edfef57b20447f18323208461309b | 5925e224cc6edfef57b20447f18323208461309b |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < 47f3be62eab50b8cd7e1ae5fc2c4dae687497c34 | 47f3be62eab50b8cd7e1ae5fc2c4dae687497c34 |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < 6d65079c69dc1feb817ed71f5bd15e83a7d6832d | 6d65079c69dc1feb817ed71f5bd15e83a7d6832d |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < f61fc650c47849637fa1771a31a11674c824138a | f61fc650c47849637fa1771a31a11674c824138a |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < 25feffb3fbd51ae81d92c65cebc0e932663828b3 | 25feffb3fbd51ae81d92c65cebc0e932663828b3 |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < 4ed21975311247bb84e82298eeb359ec0a0fa84d | 4ed21975311247bb84e82298eeb359ec0a0fa84d |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < b018c0440b871d8b001c996e95fa4538bd292de6 | b018c0440b871d8b001c996e95fa4538bd292de6 |
| linux | linux | >= 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 < 47cd3770e31df942e2bb925a9a855c79ed0662eb | 47cd3770e31df942e2bb925a9a855c79ed0662eb |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 3.2 < 4.14.326 | 4.14.326 |
| linux | linux_kernel | >= 4.15 < 4.19.295 | 4.19.295 |
| linux | linux_kernel | >= 4.20 < 5.4.257 | 5.4.257 |
| linux | linux_kernel | >= 5.11 < 5.15.132 | 5.15.132 |
| linux | linux_kernel | >= 5.16 < 6.1.53 | 6.1.53 |
| linux | linux_kernel | >= 5.5 < 5.10.195 | 5.10.195 |
| linux | linux_kernel | >= 6.2 < 6.4.16 | 6.4.16 |
| linux | linux_kernel | >= 6.5 < 6.5.3 | 6.5.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: scsi: qla4xxx: Add length check when parsing nlattrs
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2023-53456 [MEDIUM] CWE-805 kernel: scsi: qla4xxx: Add length check when parsing nlattrs
kernel: scsi: qla4xxx: Add length check when parsing nlattrs
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that qla4xxx parses nlattrs:
- qla4xxx_set_chap_entry()
- qla4xxx_iface_set_param()
- qla4xxx_sysfs_ddb_set_param()
and each of them directly converts the nlattr to specific pointer of
structure without length checking. This could be dangerous as those
attributes are not validated and a malformed nlattr (e.g., length 0) could
result in an OOB read that leaks heap dirty data.
Add the nla_len check before accessing the nlattr data and return EINVAL if
the length check fails.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of
Debian
CVE-2023-53456: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: qla4x...
vendor_debian·2023·CVSS 5.5
CVE-2023-53456 [MEDIUM] CVE-2023-53456: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: qla4x...
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx parses nlattrs: - qla4xxx_set_chap_entry() - qla4xxx_iface_set_param() - qla4xxx_sysfs_ddb_set_param() and each of them directly converts the nlattr to specific pointer of structure without length checking. This could be dangerous as those attributes are not validated and a malformed nlattr (e.g., length 0) could result in an OOB read that leaks heap dirty data. Add the nla_len check before accessing the nlattr data and return EINVAL if the length check fails.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.3-1)
sid: resolved (fixed in 6.5.3-1)
trixie: resolved
GHSA
GHSA-vp46-h7c5-rj5w: In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that
ghsa_unreviewed·2025-10-01
CVE-2023-53456 [MEDIUM] GHSA-vp46-h7c5-rj5w: In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that qla4xxx parses nlattrs:
- qla4xxx_set_chap_entry()
- qla4xxx_iface_set_param()
- qla4xxx_sysfs_ddb_set_param()
and each of them directly converts the nlattr to specific pointer of
structure without length checking. This could be dangerous as those
attributes are not validated and a malformed nlattr (e.g., length 0) could
result in an OOB read that leaks heap dirty data.
Add the nla_len check before accessing the nlattr data and return EINVAL if
the length check fails.
OSV
CVE-2023-53456: In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that q
osv·2025-10-01·CVSS 5.5
CVE-2023-53456 [MEDIUM] CVE-2023-53456: In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that q
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx parses nlattrs: - qla4xxx_set_chap_entry() - qla4xxx_iface_set_param() - qla4xxx_sysfs_ddb_set_param() and each of them directly converts the nlattr to specific pointer of structure without length checking. This could be dangerous as those attributes are not validated and a malformed nlattr (e.g., length 0) could result in an OOB read that leaks heap dirty data. Add the nla_len check before accessing the nlattr data and return EINVAL if the length check fails.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/25feffb3fbd51ae81d92c65cebc0e932663828b3https://git.kernel.org/stable/c/47cd3770e31df942e2bb925a9a855c79ed0662ebhttps://git.kernel.org/stable/c/47f3be62eab50b8cd7e1ae5fc2c4dae687497c34https://git.kernel.org/stable/c/4ed21975311247bb84e82298eeb359ec0a0fa84dhttps://git.kernel.org/stable/c/5925e224cc6edfef57b20447f18323208461309bhttps://git.kernel.org/stable/c/6d65079c69dc1feb817ed71f5bd15e83a7d6832dhttps://git.kernel.org/stable/c/b018c0440b871d8b001c996e95fa4538bd292de6https://git.kernel.org/stable/c/cfa6a1a79ed6d336fac7a5d87eb5471e4401829fhttps://git.kernel.org/stable/c/f61fc650c47849637fa1771a31a11674c824138a
2025-10-01
Published