CVE-2023-53456
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx parses nlattrs: - qla4xxx_set_chap_entry() - qla4xxx_iface_set_param() - qla4xxx_sysfs_ddb_set_param() and each of them directly converts the nlattr to specific pointer of structure without length checking. This could be dangerous as those attributes are not validated and a malformed nlattr (e.g., length 0) could result in an OOB read that leaks heap dirty data. Add the nla_len check before accessing the nlattr data and return EINVAL if the length check fails.
How to fix
- linux linux_kernel4.14.326, 4.19.295, 5.4.257, 5.10.195, 5.15.132, 6.1.53, 6.4.16, 6.5.3 or later
- git.kernel.org/stable/c/25feffb3fbd51ae81d92c65cebc0e932663828b3
- git.kernel.org/stable/c/47cd3770e31df942e2bb925a9a855c79ed0662eb
- git.kernel.org/stable/c/47f3be62eab50b8cd7e1ae5fc2c4dae687497c34
- git.kernel.org/stable/c/4ed21975311247bb84e82298eeb359ec0a0fa84d
- git.kernel.org/stable/c/5925e224cc6edfef57b20447f18323208461309b
- git.kernel.org/stable/c/6d65079c69dc1feb817ed71f5bd15e83a7d6832d
- git.kernel.org/stable/c/b018c0440b871d8b001c996e95fa4538bd292de6
- git.kernel.org/stable/c/cfa6a1a79ed6d336fac7a5d87eb5471e4401829f
- git.kernel.org/stable/c/f61fc650c47849637fa1771a31a11674c824138a
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.2 ≤ v < 4.14.326, 4.15 ≤ v < 4.19.295, 4.20 ≤ v < 5.4.257, 5.5 ≤ v < 5.10.195, 5.11 ≤ v < 5.15.132, 5.16 ≤ v < 6.1.53, 6.2 ≤ v < 6.4.16, 6.5 ≤ v < 6.5.3 | 4.14.326, 4.19.295, 5.4.257, 5.10.195, 5.15.132, 6.1.53, 6.4.16, 6.5.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.