InfoSec Signals^™

Sign In Start Free

Back to CVE records

Not yet scoredPublished Dec 30, 2025

CVE-2023-54179scsi: qla2xxx: Array index may go out of bound

Updated under an hour ago (Oct 28, 2026, 11:20 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_str' of size 16 may use index value(s) 16..19. Use snprintf() instead of sprintf().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e697f466bf61280b7e996c9ea096d7ec371c31ea; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ea64c727f20123342020257cfa956fbfbd6d12ff; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bcd773969a87d9802053c0db5be84abd6594a024; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 748d8f8698a2f48ffe32dd7b35dbab1810ed1f82; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2b3bdef089b920b4a19fefb4f4e6dda56a4bb583; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e934737e18ff069a66cd53cd7f7a0b34ae2c24fe; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d721b591b95cf3f290f8a7cbe90aa2ee0368388d	CNA record

References

References

https://git.kernel.org/stable/c/e697f466bf61280b7e996c9ea096d7ec371c31ea
https://git.kernel.org/stable/c/ea64c727f20123342020257cfa956fbfbd6d12ff
https://git.kernel.org/stable/c/bcd773969a87d9802053c0db5be84abd6594a024
https://git.kernel.org/stable/c/748d8f8698a2f48ffe32dd7b35dbab1810ed1f82
https://git.kernel.org/stable/c/2b3bdef089b920b4a19fefb4f4e6dda56a4bb583
https://git.kernel.org/stable/c/e934737e18ff069a66cd53cd7f7a0b34ae2c24fe
https://git.kernel.org/stable/c/d721b591b95cf3f290f8a7cbe90aa2ee0368388d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices

We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.