CVE-2023-53803

scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()

State: Published
Severity: 8.1 High
Published: Dec 9, 2025
Updated: Oct 15, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()

A fix for:

BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271

Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	21fab1d0595eacf781705ec3509012a28f298245 to before da1a955c48a16e16e925d6544793914e52a6fa51Affected 21fab1d0595eacf781705ec3509012a28f298245 to before 9e5c7d52085b8c84bc82a261580f0eb170039325Affected 21fab1d0595eacf781705ec3509012a28f298245 to before 467afb1dd630d8c6d172bd6cacc125199b5f4f2dAffected 21fab1d0595eacf781705ec3509012a28f298245 to before e4dd25da784b2e07dbfbf04509afa4c5a1375227Affected 21fab1d0595eacf781705ec3509012a28f298245 to before 2b28a7d261cb309912596d6a2d383ca370483527Affected 21fab1d0595eacf781705ec3509012a28f298245 to before 0dfe68394cbe1d4fe579fb325ecc813c50528c5aAffected 21fab1d0595eacf781705ec3509012a28f298245 to before 799e8dd2022d2e13f0c5c1906b40ceca07a23349Affected 21fab1d0595eacf781705ec3509012a28f298245 to before 9b4f5028e493cb353a5c8f5c45073eeea0303abdAffected
LinuxLinux	2.6.32Affected before 2.6.32Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

21fab1d0595eacf781705ec3509012a28f298245 to before da1a955c48a16e16e925d6544793914e52a6fa51Affected
21fab1d0595eacf781705ec3509012a28f298245 to before 9e5c7d52085b8c84bc82a261580f0eb170039325Affected
21fab1d0595eacf781705ec3509012a28f298245 to before 467afb1dd630d8c6d172bd6cacc125199b5f4f2dAffected
21fab1d0595eacf781705ec3509012a28f298245 to before e4dd25da784b2e07dbfbf04509afa4c5a1375227Affected
21fab1d0595eacf781705ec3509012a28f298245 to before 2b28a7d261cb309912596d6a2d383ca370483527Affected
21fab1d0595eacf781705ec3509012a28f298245 to before 0dfe68394cbe1d4fe579fb325ecc813c50528c5aAffected
21fab1d0595eacf781705ec3509012a28f298245 to before 799e8dd2022d2e13f0c5c1906b40ceca07a23349Affected
21fab1d0595eacf781705ec3509012a28f298245 to before 9b4f5028e493cb353a5c8f5c45073eeea0303abdAffected

LinuxLinux

2.6.32Affected
before 2.6.32Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.