CVE-2023-53118

scsi: core: Fix a procfs host directory removal regression

MEDIUM

5.5

CVSS Score

Published: May 2, 2025 at 03:55 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_hostdir_rm() decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsi_add_host_with_dma() change since scsi_add_host_with_dma() will return 0 (success) if scsi_proc_host_add() is called.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 4.19.2784.19.278 ≤ v < 4.205.10.175 ≤ v < 5.10.1765.15.103 ≤ v < 5.15.1045.4.237 ≤ v < 5.4.2386.1.20 ≤ v < 6.1.216.2.7 ≤ v < 6.2.813daafe1e209b03e9bda16ff2bd2b2da145a139b17e98a5ede81b7696bec421f7afa2dfe467f5e6b1ec363599f8346d5a8d08c71a0d9860d6c420ec04.19.278 5.10.175 5.15.103 5.4.237 6.1.20 6.2.7 6.3 rc1 6.3 rc26b223e32d66ca9db1f252f433514783d8b22a8e1891a3cba425cf483d96facca55aebd6ff1da4338e471e928de97b00f297ad1015cc14f9459765713fc663711b94468f4e1427ebe289c9f05669699c9

Vendor states this is fixed in 2a764d55e938743efa7c2cba7305633bcf227f09 (fixed)

Vendor states this is fixed in 68c665bb185037e7eb66fb792c61da9d7151e99c (fixed)

Vendor states this is fixed in 73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51 (fixed)

Vendor states this is fixed in 7e0ae8667fcdd99d1756922e1140cac75f5fa279 (fixed)

Vendor states this is fixed in 88c3d3bb6469cea929ac68fd326bdcbefcdfdd83 (fixed)

Vendor states this is fixed in be03df3d4bfe7e8866d4aa43d62e648ffe884f5f (fixed)

Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.176, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.104, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.238, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.1.21, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.2.8, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references