SECUFOCUSNOW
Home›CVE index›CVE-2023-53803
Review reviewHigh

CVE-2023-53803

Linux

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.

CVSS
8.1
EPSS
0.25%
16.8% percentile
CISA KEV
Not listed
Published
2025.12.09
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.25%
Technical severityCVSS 8.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.

Affected product and versions

Product
Linux
Affected versions
>= 21fab1d0595eacf781705ec3509012a28f298245 < da1a955c48a16e16e925d6544793914e52a6fa51, >= 21fab1d0595eacf781705ec3509012a28f298245 < 9e5c7d52085b8c84bc82a261580f0eb170039325, >= 21fab1d0595eacf781705ec3509012a28f298245 < 467afb1dd630d8c6d172bd6cacc125199b5f4f2d, >= 21fab1d0595eacf781705ec3509012a28f298245 < e4dd25da784b2e07dbfbf04509afa4c5a1375227, >= 21fab1d0595eacf781705ec3509012a28f298245 < 2b28a7d261cb309912596d6a2d383ca370483527, >= 21fab1d0595eacf781705ec3509012a28f298245 < 0dfe68394cbe1d4fe579fb325ecc813c50528c5a, >= 21fab1d0595eacf781705ec3509012a28f298245 < 799e8dd2022d2e13f0c5c1906b40ceca07a23349, >= 21fab1d0595eacf781705ec3509012a28f298245 < 9b4f5028e493cb353a5c8f5c45073eeea0303abd, >= 2.6.32
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CWE
Not available
CVE-2023-53803 — Linux | SECUFOCUS NOW