CVE-2023-53803

Linux Kernel - Slab-Out-of-Bounds Read in ses_enclosure_data_process()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.

Scores

EPSS 0.0018
EPSS Percentile 7.2%

Details

Status published
Products (25)
linux/Kernel 2.6.32 - 4.14.308linux
linux/Kernel 4.15.0 - 4.19.276linux
linux/Kernel 4.20.0 - 5.4.235linux
linux/Kernel 5.11.0 - 5.15.99linux
linux/Kernel 5.16.0 - 6.1.16linux
linux/Kernel 5.5.0 - 5.10.173linux
linux/Kernel 6.2.0 - 6.2.3linux
Linux/Linux < 2.6.32
Linux/Linux 2.6.32
Linux/Linux 21fab1d0595eacf781705ec3509012a28f298245 - 0dfe68394cbe1d4fe579fb325ecc813c50528c5a
... and 15 more
Published Dec 09, 2025
Tracked Since Feb 18, 2026