CVE-2023-54011Buffer Access with Incorrect Length Value in Linux

Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 24

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size (32 instead of 64 bytes).

Affected Packages4 packages

Linuxlinux/linux_kernel6.1.06.1.18+1
Debianlinux/linux_kernel< 6.1.20-1+2
CVEListV5linux/linux42fc9fee116fc6a225a1f738adf86689d5c39d49abfe73c16b295f2213e9bfc0a1df232056032448+3
debiandebian/linux< linux 6.1.20-1 (bookworm)

🔴Vulnerability Details

3
OSV
CVE-2023-54011: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size (32 instead of 62025-12-24
GHSA
GHSA-v87f-6285-pqgv: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size (32 instead of2025-12-24
OSV
scsi: mpi3mr: Fix an issue found by KASAN2025-12-24

📋Vendor Advisories

2
Red Hat
kernel: scsi: mpi3mr: Fix an issue found by KASAN2025-12-24
Debian
CVE-2023-54011: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3m...2023

🕵️Threat Intelligence

1
Wiz
CVE-2023-54011 Impact, Exploitability, and Mitigation Steps | Wiz