CVE-2023-54179 - Vulnerability Details - OpenCVE

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Array index may go out of bound

Klocwork reports array 'vha->host_str' of size 16 may use index value(s)
16..19. Use snprintf() instead of sprintf().

Published: 2025-12-30

Score: 7.0 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< e697f466bf61280b7e996c9ea096d7ec371c31ea
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< ea64c727f20123342020257cfa956fbfbd6d12ff
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< bcd773969a87d9802053c0db5be84abd6594a024
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 748d8f8698a2f48ffe32dd7b35dbab1810ed1f82
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 2b3bdef089b920b4a19fefb4f4e6dda56a4bb583
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< e934737e18ff069a66cd53cd7f7a0b34ae2c24fe
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< d721b591b95cf3f290f8a7cbe90aa2ee0368388d

Linux

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`4.19.291`	unaffected	≤ 4.19.*
`5.4.253`	unaffected	≤ 5.4.*
`5.10.188`	unaffected	≤ 5.10.*
`5.15.121`	unaffected	≤ 5.15.*
`6.1.40`	unaffected	≤ 6.1.*
`6.4.5`	unaffected	≤ 6.4.*
`6.5`	unaffected	≤ *

No data.

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583
https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82
https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024
https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d
https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea
https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe
https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff
https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2023-54179-e6e3@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54179
https://www.cve.org/CVERecord?id=CVE-2023-54179

History

Wed, 31 Dec 2025 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2023-54179-e6e3@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54179 https://www.cve.org/CVERecord?id=CVE-2023-54179
Metrics	threat_severity `None`	cvssV3_1 `{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}` threat_severity `Important`

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_str' of size 16 may use index value(s) 16..19. Use snprintf() instead of sprintf().
Title		scsi: qla2xxx: Array index may go out of bound
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583 https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82 https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024 https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:08:51.065Z

Updated: 2026-05-11T19:56:58.726Z

Reserved: 2025-12-30T12:06:44.497Z

Link: CVE-2023-54179

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:05.827

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54179

Redhat

Severity : Important

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54179 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-54179", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-12-30T12:06:44.497Z", "datePublished": "2025-12-30T12:08:51.065Z", "dateUpdated": "2026-05-11T19:56:58.726Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T19:56:58.726Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Array index may go out of bound\n\nKlocwork reports array 'vha->host_str' of size 16 may use index value(s)\n16..19. Use snprintf() instead of sprintf()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/scsi/qla2xxx/qla_os.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "e697f466bf61280b7e996c9ea096d7ec371c31ea", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "ea64c727f20123342020257cfa956fbfbd6d12ff", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "bcd773969a87d9802053c0db5be84abd6594a024", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "748d8f8698a2f48ffe32dd7b35dbab1810ed1f82", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "2b3bdef089b920b4a19fefb4f4e6dda56a4bb583", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "e934737e18ff069a66cd53cd7f7a0b34ae2c24fe", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "d721b591b95cf3f290f8a7cbe90aa2ee0368388d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/scsi/qla2xxx/qla_os.c"], "versions": [{"version": "2.6.12", "status": "affected"}, {"version": "0", "lessThan": "2.6.12", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.291", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.253", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.188", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.121", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.40", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.4.5", "lessThanOrEqual": "6.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "4.19.291"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "5.4.253"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "5.10.188"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "5.15.121"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "6.1.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "6.4.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.12", "versionEndExcluding": "6.5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea"}, {"url": "https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff"}, {"url": "https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024"}, {"url": "https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82"}, {"url": "https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583"}, {"url": "https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe"}, {"url": "https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d"}], "title": "scsi: qla2xxx: Array index may go out of bound", "x_generator": {"engine": "bippy-1.2.0"}}}}