PT-2025-53052 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2025-12-26 · CVE-2023-54054

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the qla2xxx SCSI driver that can lead to a buffer overrun. The issue stems from an incorrect buffer size calculation during the use of the fc els flogi function, resulting in a potential array index out of bounds write. The driver uses fc els flogi to determine the buffer size, but the actual buffer nested within fc els flogi is smaller than expected. This is addressed by correcting the structure name to enable accurate size calculation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54054

Affected Products

Linux Kernel

Qla2Xxx

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54054.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54054 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54054 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54054 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54054 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54054 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54054 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54054 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54054 · Vendor Advisory
• https://git.kernel.org/stable/c/89250e775dcc4482d8e970ed92ad2c9458b14a8a · Note
• https://git.kernel.org/stable/c/2dddbf8de128289a3fb7ae38d9bc4b2217205ec1 · Note
• https://twitter.com/CVEnew/status/2004457790316962149 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/eecb8a491c824a9376155d26ec95b6d0054c059c · Note
• https://git.kernel.org/stable/c/d5e7c9cd56e987c8687859a0bf38fd86aa8f3cec · Note