CVE-2023-53803
Linux Kernel - Slab-Out-of-Bounds Read in ses_enclosure_data_process()
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.
References (8)
Core 8
Core References
Scores
EPSS
0.0018
EPSS Percentile
7.2%
Details
Status
published
Products (25)
linux/Kernel
2.6.32 - 4.14.308linux
linux/Kernel
4.15.0 - 4.19.276linux
linux/Kernel
4.20.0 - 5.4.235linux
linux/Kernel
5.11.0 - 5.15.99linux
linux/Kernel
5.16.0 - 6.1.16linux
linux/Kernel
5.5.0 - 5.10.173linux
linux/Kernel
6.2.0 - 6.2.3linux
Linux/Linux
< 2.6.32
Linux/Linux
2.6.32
Linux/Linux
21fab1d0595eacf781705ec3509012a28f298245 - 0dfe68394cbe1d4fe579fb325ecc813c50528c5a
... and 15 more
Published
Dec 09, 2025
Tracked Since
Feb 18, 2026