CVE-2023-54102

scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow

A static code analysis tool flagged the possibility of buffer overflow when

using copy_from_user() for a debugfs entry.

Currently, it is possible that copy_from_user() copies more bytes than what

would fit in the mybuf char array. Add a min() restriction check between

sizeof(mybuf) - 1 and nbytes passed from the userspace buffer to protect

against buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Published
2025-12-24T13:06Z
EPSS history
Timeline
  • 24 DEC 13:06Z
    scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
    cvelistv5