CVE-2023-54179 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Severity
6.6MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Array index may go out of bound
Klocwork reports array 'vha->host_str' of size 16 may use index value(s)
16..19. Use snprintf() instead of sprintf().
Affected Packages4 packages
▶CVEListV5linux/linux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 — e697f466bf61280b7e996c9ea096d7ec371c31ea+7
🔴Vulnerability Details
3OSV▶
CVE-2023-54179: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_s↗2025-12-30
GHSA▶
GHSA-39wf-xfc6-2r64: In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Array index may go out of bound
Klocwork reports array 'vha->host↗2025-12-30