CVE-2023-53675

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

State: Published
Severity: 8.8 High
Published: Oct 7, 2025
Updated: Oct 15, 2026
Reserved: Oct 7, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9927c68864e9c39cc317b4f559309ba29e642168 to before 72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before cffe09ca0555e235a42d6fa065e463c4b3d5b657Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before c315560e3ef77c1d822249f1743e647dc9c9912aAffected 9927c68864e9c39cc317b4f559309ba29e642168 to before 584892fd29a41ef424a148118a3103b16b94fb8cAffected 9927c68864e9c39cc317b4f559309ba29e642168 to before 414418abc19fa4ccf730d273061a426c07a061d6Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 4b8cae410472653a59e15af62c57c49b8e0a1201Affected 9927c68864e9c39cc317b4f559309ba29e642168 to before 801ab13d50cf3d26170ee073ea8bb4eececb76abAffected
LinuxLinux	2.6.25Affected before 2.6.25Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

9927c68864e9c39cc317b4f559309ba29e642168 to before 72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before cffe09ca0555e235a42d6fa065e463c4b3d5b657Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before c315560e3ef77c1d822249f1743e647dc9c9912aAffected
9927c68864e9c39cc317b4f559309ba29e642168 to before 584892fd29a41ef424a148118a3103b16b94fb8cAffected
9927c68864e9c39cc317b4f559309ba29e642168 to before 414418abc19fa4ccf730d273061a426c07a061d6Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 4b8cae410472653a59e15af62c57c49b8e0a1201Affected
9927c68864e9c39cc317b4f559309ba29e642168 to before 801ab13d50cf3d26170ee073ea8bb4eececb76abAffected

LinuxLinux

2.6.25Affected
before 2.6.25Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.