CVE-2023-53676
published 2025-10-07CVE-2023-53676: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function…
PriorityP342high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.16%
5.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
The function lio_target_nacl_info_show() uses sprintf() in a loop to print
details for every iSCSI connection in a session without checking for the
buffer length. With enough iSCSI connections it's possible to overflow the
buffer provided by configfs and corrupt the memory.
This patch replaces sprintf() with sysfs_emit_at() that checks for buffer
boundries.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < df349e84c2cb0dd05d98c8e1189c26ab4b116083 | df349e84c2cb0dd05d98c8e1189c26ab4b116083 |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < 114b44dddea1f8f99576de3c0e6e9059012002fc | 114b44dddea1f8f99576de3c0e6e9059012002fc |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < 2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6 | 2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6 |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < bbe3ff47bf09db8956bc2eeb49d2d514d256ad2a | bbe3ff47bf09db8956bc2eeb49d2d514d256ad2a |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < 5353df78c22623b42a71d51226d228a8413097e2 | 5353df78c22623b42a71d51226d228a8413097e2 |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < 4738bf8b2d3635c2944b81b2a84d97b8c8b0978d | 4738bf8b2d3635c2944b81b2a84d97b8c8b0978d |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < 0cac6cbb9908309352a5d30c1876882771d3da50 | 0cac6cbb9908309352a5d30c1876882771d3da50 |
| linux | linux | >= e48354ce078c079996f89d715dfa44814b4eba01 < 801f287c93ff95582b0a2d2163f12870a2f076d4 | 801f287c93ff95582b0a2d2163f12870a2f076d4 |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 3.1 < 4.14.326 | 4.14.326 |
| linux | linux_kernel | >= 4.15 < 4.19.295 | 4.19.295 |
| linux | linux_kernel | >= 4.20 < 5.4.257 | 5.4.257 |
| linux | linux_kernel | >= 5.11 < 5.15.133 | 5.15.133 |
| linux | linux_kernel | >= 5.16 < 6.1.55 | 6.1.55 |
| linux | linux_kernel | >= 5.5 < 5.10.197 | 5.10.197 |
| linux | linux_kernel | >= 6.2 < 6.5.5 | 6.5.5 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-53676: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The functi
osv·2025-10-07·CVSS 7.8
CVE-2023-53676 [HIGH] CVE-2023-53676: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The functi
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.
GHSA
GHSA-4832-crwv-4gfx: In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
The func
ghsa_unreviewed·2025-10-07
CVE-2023-53676 [HIGH] CWE-787 GHSA-4832-crwv-4gfx: In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
The func
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
The function lio_target_nacl_info_show() uses sprintf() in a loop to print
details for every iSCSI connection in a session without checking for the
buffer length. With enough iSCSI connections it's possible to overflow the
buffer provided by configfs and corrupt the memory.
This patch replaces sprintf() with sysfs_emit_at() that checks for buffer
boundries.
Red Hat
kernel: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
vendor_redhat·2025-10-07·CVSS 7.8
CVE-2023-53676 [HIGH] CWE-787 kernel: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
kernel: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
The function lio_target_nacl_info_show() uses sprintf() in a loop to print
details for every iSCSI connection in a session without checking for the
buffer length. With enough iSCSI connections it's possible to overflow the
buffer provided by configfs and corrupt the memory.
This patch replaces sprintf() with sysfs_emit_at() that checks for buffer
boundries.
Statement: A buffer overflow in lio_target_nacl_info_show() (configfs path) used sprintf() in a loop, allowing writes past the sysfs buffer when many iSCSI connections exist. The fix switches to sysfs_emit_at() which e
Debian
CVE-2023-53676: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: targe...
vendor_debian·2023·CVSS 7.8
CVE-2023-53676 [HIGH] CVE-2023-53676: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: targe...
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0cac6cbb9908309352a5d30c1876882771d3da50https://git.kernel.org/stable/c/114b44dddea1f8f99576de3c0e6e9059012002fchttps://git.kernel.org/stable/c/2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6https://git.kernel.org/stable/c/4738bf8b2d3635c2944b81b2a84d97b8c8b0978dhttps://git.kernel.org/stable/c/5353df78c22623b42a71d51226d228a8413097e2https://git.kernel.org/stable/c/801f287c93ff95582b0a2d2163f12870a2f076d4https://git.kernel.org/stable/c/bbe3ff47bf09db8956bc2eeb49d2d514d256ad2ahttps://git.kernel.org/stable/c/df349e84c2cb0dd05d98c8e1189c26ab4b116083
2025-10-07
Published