CVE-2023-53456

scsi: qla4xxx: Add length check when parsing nlattrs

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla4xxx: Add length check when parsing nlattrs

There are three places that qla4xxx parses nlattrs:

- qla4xxx_set_chap_entry()

- qla4xxx_iface_set_param()

- qla4xxx_sysfs_ddb_set_param()

and each of them directly converts the nlattr to specific pointer of structure without length checking. This could be dangerous as those attributes are not validated and a malformed nlattr (e.g., length 0) could result in an OOB read that leaks heap dirty data.

Add the nla_len check before accessing the nlattr data and return EINVAL if the length check fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before cfa6a1a79ed6d336fac7a5d87eb5471e4401829fAffected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 5925e224cc6edfef57b20447f18323208461309bAffected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 47f3be62eab50b8cd7e1ae5fc2c4dae687497c34Affected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 6d65079c69dc1feb817ed71f5bd15e83a7d6832dAffected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before f61fc650c47849637fa1771a31a11674c824138aAffected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 25feffb3fbd51ae81d92c65cebc0e932663828b3Affected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 4ed21975311247bb84e82298eeb359ec0a0fa84dAffected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before b018c0440b871d8b001c996e95fa4538bd292de6Affected 00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 47cd3770e31df942e2bb925a9a855c79ed0662ebAffected
LinuxLinux	3.2Affected before 3.2Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before cfa6a1a79ed6d336fac7a5d87eb5471e4401829fAffected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 5925e224cc6edfef57b20447f18323208461309bAffected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 47f3be62eab50b8cd7e1ae5fc2c4dae687497c34Affected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 6d65079c69dc1feb817ed71f5bd15e83a7d6832dAffected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before f61fc650c47849637fa1771a31a11674c824138aAffected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 25feffb3fbd51ae81d92c65cebc0e932663828b3Affected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 4ed21975311247bb84e82298eeb359ec0a0fa84dAffected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before b018c0440b871d8b001c996e95fa4538bd292de6Affected
00c31889f7513e9ffa6b2b4de8ad6d7f59a61c80 to before 47cd3770e31df942e2bb925a9a855c79ed0662ebAffected

LinuxLinux

3.2Affected
before 3.2Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.