CVE-2023-53676

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()

The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory.

This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.

A buffer overflow in lio_target_nacl_info_show() (configfs path) used sprintf() in a loop, allowing writes past the sysfs buffer when many iSCSI connections exist. The fix switches to sysfs_emit_at() which enforces bounds. For the CVSS the PR:H because triggering requires local access to the iSCSI target’s configfs attributes—typically restricted to root/CAP_SYS_ADMIN or dedicated management users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.