CVE-2023-54102

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue exists in the Linux kernel's scsi subsystem, specifically within the lpfc debugfs lockstat write() function. A static code analysis identified that copy from user() could potentially copy more bytes than the mybuf character array could accommodate, leading to a buffer overflow. The issue is addressed by adding a min() restriction check to limit the number of bytes copied from user space to the size of the mybuf array minus one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.