CVE-2023-53675 PUBLISHED

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Assigner: Linux
Reserved: 07.10.2025 Published: 07.10.2025 Updated: 07.10.2025

In the Linux kernel, the following vulnerability has been resolved:

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to cffe09ca0555e235a42d6fa065e463c4b3d5b657 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to c315560e3ef77c1d822249f1743e647dc9c9912a (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 584892fd29a41ef424a148118a3103b16b94fb8c (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 414418abc19fa4ccf730d273061a426c07a061d6 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 4b8cae410472653a59e15af62c57c49b8e0a1201 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 801ab13d50cf3d26170ee073ea8bb4eececb76ab (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 4.14.308 to 4.14.* (incl.)
  • unaffected from 4.19.276 to 4.19.* (incl.)
  • unaffected from 5.4.235 to 5.4.* (incl.)
  • unaffected from 5.10.173 to 5.10.* (incl.)
  • unaffected from 5.15.99 to 5.15.* (incl.)
  • unaffected from 6.1.16 to 6.1.* (incl.)
  • unaffected from 6.2.3 to 6.2.* (incl.)
  • unaffected from 6.3 to * (incl.)

References