CVE-2023-53521

scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()

A fix for:

BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses] Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013

When edev->components is zero, accessing edev->component[0] members is wrong.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9927c68864e9c39cc317b4f559309ba29e642168 to before 76f7050537476ac062ec23a544fbca8270f2d08bAffected 9927c68864e9c39cc317b4f559309ba29e642168 to before 87e47be38d205df338c52ead43f23b2864567423Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 40af9a6deed723485e05b7d3255a28750692e8dbAffected 9927c68864e9c39cc317b4f559309ba29e642168 to before 8f9542cad6c27297c8391de3a659f0b7948495d0Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 0595cdb587726b4f0fa780eb7462e3679d141e82Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 82143faf01dda831b89eccef60c39ef8575ab08aAffected 9927c68864e9c39cc317b4f559309ba29e642168 to before 2fb1fa8425cce2dc4dce298275d22d7077694b73Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 578797f0c8cbc2e3ec5fc0dab87087b4c7073686Affected
LinuxLinux	2.6.25Affected before 2.6.25Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

9927c68864e9c39cc317b4f559309ba29e642168 to before 76f7050537476ac062ec23a544fbca8270f2d08bAffected
9927c68864e9c39cc317b4f559309ba29e642168 to before 87e47be38d205df338c52ead43f23b2864567423Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 40af9a6deed723485e05b7d3255a28750692e8dbAffected
9927c68864e9c39cc317b4f559309ba29e642168 to before 8f9542cad6c27297c8391de3a659f0b7948495d0Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 0595cdb587726b4f0fa780eb7462e3679d141e82Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 82143faf01dda831b89eccef60c39ef8575ab08aAffected
9927c68864e9c39cc317b4f559309ba29e642168 to before 2fb1fa8425cce2dc4dce298275d22d7077694b73Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 578797f0c8cbc2e3ec5fc0dab87087b4c7073686Affected

LinuxLinux

2.6.25Affected
before 2.6.25Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.