CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
Vulnerability summary
CVE-2023-53676 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 25.2% of scored vulnerabilities.
Not severe (CVSS 8.8, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 91 · Related 91Timeline
- 07-10-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.32% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu123 products
- linuxAll versions (No fix recorded) | < 5.4.0-169.187 | < 5.15.0-94.104
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1116.126 | < 5.15.0-1053.58
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Suse7 products
- kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.195.1
- kernel-docs&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.195.1
- kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.195.1
- kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.195.1
- kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.195.1
Linux2 products
- linux≥ e48354ce078c079996f89d715dfa44814b4eba01, < df349e84c2cb0dd05d98c8e1189c26ab4b116083 | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < 114b44dddea1f8f99576de3c0e6e9059012002fc | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < 2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6 | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < bbe3ff47bf09db8956bc2eeb49d2d514d256ad2a | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < 5353df78c22623b42a71d51226d228a8413097e2 | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < 4738bf8b2d3635c2944b81b2a84d97b8c8b0978d | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < 0cac6cbb9908309352a5d30c1876882771d3da50 | ≥ e48354ce078c079996f89d715dfa44814b4eba01, < 801f287c93ff95582b0a2d2163f12870a2f076d4 | 3.1
- linux_kernel≥ 3.1, < 4.14.326 | ≥ 4.15, < 4.19.295 | ≥ 4.20, < 5.4.257 | ≥ 5.5, < 5.10.197 | ≥ 5.11, < 5.15.133 | ≥ 5.16, < 6.1.55 | ≥ 6.2, < 6.5.5
Debian1 product
- linux< 6.1.55-1 | < 6.5.6-1
4 vendors · 133 products
