CVE-2023-54102

Source
https://cve.org/CVERecord?id=CVE-2023-54102
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54102.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54102
Downstream
Related
Published
2025-12-24T13:06:27.915Z
Modified
2026-03-12T03:29:57.837948Z
Summary
scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Prevent lpfcdebugfslockstat_write() buffer overflow

A static code analysis tool flagged the possibility of buffer overflow when using copyfromuser() for a debugfs entry.

Currently, it is possible that copyfromuser() copies more bytes than what would fit in the mybuf char array. Add a min() restriction check between sizeof(mybuf) - 1 and nbytes passed from the userspace buffer to protect against buffer overflow.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54102.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6a828b0f6192b4930894925d1c1d0dc1f1d99e6e
Fixed
644a9d5e22761a41d5005a26996a643da96de962
Fixed
e0e7faee3a7dd6f51350cda64997116a247eb045
Fixed
f91037487036e2d2f18d3c2481be6b9a366bde7f
Fixed
a9df88cb31dcbd72104ec5883f35cbc1fb587e47
Fixed
ad050f6cf681ebb850a9d4bc19474d3896476301
Fixed
c6087b82a9146826564a55c5ca0164cac40348f5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54102.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.1.0
Fixed
5.4.244
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.181
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.113
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.30
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.3.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54102.json"