CVE-2023-54179 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Array index may go out of bound

Klocwork reports array 'vha->host_str' of size 16 may use index value(s)
16..19. Use snprintf() instead of sprintf().

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583
https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82
https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024
https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d
https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea
https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe
https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff
https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2023-54179-e6e3@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54179
https://www.cve.org/CVERecord?id=CVE-2023-54179

History

Wed, 31 Dec 2025 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2023-54179-e6e3@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54179 https://www.cve.org/CVERecord?id=CVE-2023-54179
Metrics	threat_severity `None`	cvssV3_1 `{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}` threat_severity `Important`

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_str' of size 16 may use index value(s) 16..19. Use snprintf() instead of sprintf().
Title		scsi: qla2xxx: Array index may go out of bound
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583 https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82 https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024 https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:08:51.065Z

Updated: 2025-12-30T12:08:51.065Z

Reserved: 2025-12-30T12:06:44.497Z

Link: CVE-2023-54179

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-12-30T13:16:05.827

Modified: 2025-12-30T13:16:05.827

Link: CVE-2023-54179

Redhat

Severity : Important

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54179 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-54179", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-12-30T12:06:44.497Z", "datePublished": "2025-12-30T12:08:51.065Z", "dateUpdated": "2025-12-30T12:08:51.065Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-12-30T12:08:51.065Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Array index may go out of bound\n\nKlocwork reports array 'vha->host_str' of size 16 may use index value(s)\n16..19. Use snprintf() instead of sprintf()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/scsi/qla2xxx/qla_os.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "e697f466bf61280b7e996c9ea096d7ec371c31ea", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "ea64c727f20123342020257cfa956fbfbd6d12ff", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "bcd773969a87d9802053c0db5be84abd6594a024", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "748d8f8698a2f48ffe32dd7b35dbab1810ed1f82", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "2b3bdef089b920b4a19fefb4f4e6dda56a4bb583", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "e934737e18ff069a66cd53cd7f7a0b34ae2c24fe", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "d721b591b95cf3f290f8a7cbe90aa2ee0368388d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/scsi/qla2xxx/qla_os.c"], "versions": [{"version": "4.19.291", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.253", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.188", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.121", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.40", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.4.5", "lessThanOrEqual": "6.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.19.291"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.4.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.10.188"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.15.121"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.1.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.4.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea"}, {"url": "https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff"}, {"url": "https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024"}, {"url": "https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82"}, {"url": "https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583"}, {"url": "https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe"}, {"url": "https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d"}], "title": "scsi: qla2xxx: Array index may go out of bound", "x_generator": {"engine": "bippy-1.2.0"}}}}