CVE-2023-53676

HighCVSS 7.8/10Last modified Oct 28, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()

The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory.

This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= e48354ce078c079996f89d715dfa44814b4eba01, < df349e84c2cb0dd05d98c8e1189c26ab4b116083; >= e48354ce078c079996f89d715dfa44814b4eba01, < 114b44dddea1f8f99576de3c0e6e9059012002fc; >= e48354ce078c079996f89d715dfa44814b4eba01, < 2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6; >= e48354ce078c079996f89d715dfa44814b4eba01, < bbe3ff47bf09db8956bc2eeb49d2d514d256ad2a; >= e48354ce078c079996f89d715dfa44814b4eba01, < 5353df78c22623b42a71d51226d228a8413097e2; >= e48354ce078c079996f89d715dfa44814b4eba01, < 4738bf8b2d3635c2944b81b2a84d97b8c8b0978d; >= e48354ce078c079996f89d715dfa44814b4eba01, < 0cac6cbb9908309352a5d30c1876882771d3da50; >= e48354ce078c079996f89d715dfa44814b4eba01, < 801f287c93ff95582b0a2d2163f12870a2f076d4
LinuxLinux3.1

References

Timeline

Published
Oct 7, 2025
Last modified
Oct 28, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-536775.5In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leaks in i915 selftests This patch fixes memory lCVE-2023-536785.5In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev CVE-2023-536795.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an integer underflow Fix an integer underflow that CVE-2023-53686.5On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional space in the file wCVE-2023-536807.8In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL OPDESC() siCVE-2023-536815.5In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_alloc to make the failure behavior consistCVE-2023-536825.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (xgene) Fix ioremap and memremap leak Smatch reports: drivers/CVE-2023-536835.5In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syCVE-2023-536845.5In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to uCVE-2023-536855.5In the Linux kernel, the following vulnerability has been resolved: tun: Fix memory leak for detached NAPI queue. syzkaller reported [0] mCVE-2023-536865.5In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix null-ptr-deref in handshake_nl_done_doit() We shoulCVE-2023-536875.5In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk()