CVE-2023-53675

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

HIGH

7.1

CVSS Score

Published: October 7, 2025 at 03:21 PM UTC

Updated: October 15, 2026 at 10:17 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_ptr out-of-bounds accesses Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.25 ≤ v < 4.14.3084.15 ≤ v < 4.19.2764.20 ≤ v < 5.4.2355.11 ≤ v < 5.15.995.16 ≤ v < 6.1.165.5 ≤ v < 5.10.1736.2 ≤ v < 6.2.32.6.259927c68864e9c39cc317b4f559309ba29e642168

Vendor states this is fixed in 414418abc19fa4ccf730d273061a426c07a061d6 (fixed)

Vendor states this is fixed in 4b8cae410472653a59e15af62c57c49b8e0a1201 (fixed)

Vendor states this is fixed in 584892fd29a41ef424a148118a3103b16b94fb8c (fixed)

Vendor states this is fixed in 72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7 (fixed)

Vendor states this is fixed in 79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19 (fixed)

Vendor states this is fixed in 801ab13d50cf3d26170ee073ea8bb4eececb76ab (fixed)

Vendor states this is fixed in c315560e3ef77c1d822249f1743e647dc9c9912a (fixed)

Vendor states this is fixed in cffe09ca0555e235a42d6fa065e463c4b3d5b657 (fixed)

Vendor states this is fixed in 2.6.25 (unaffected)

Vendor states this is fixed in 4.14.308 (unaffected)

Vendor states this is fixed in 4.19.276 (unaffected)

Vendor states this is fixed in 5.10.173 (unaffected)