CVE-2023-53675 — scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Back Back to CVE browser

HIGH

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Published Oct 7, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  2.6.25
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <2.6.25
- Version
  4.14.308
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.276
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.173
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.99
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.235
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.1.16
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.2.3
  Status
  unaffected
  Constraints
  <=6.2.*
- Version
  6.3
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
2.6.25	affected	-
0	unaffected	<2.6.25
4.14.308	unaffected	<=4.14.*
4.19.276	unaffected	<=4.19.*
5.10.173	unaffected	<=5.10.*
5.15.99	unaffected	<=5.15.*
5.4.235	unaffected	<=5.4.*
6.1.16	unaffected	<=6.1.*
6.2.3	unaffected	<=6.2.*
6.3	unaffected	<=*

Red Hat Enterprise Linux 7 Extended Lifecycle Support

kernel-0:3.10.0-1160.145.1.el7

Fixed · RHSA-2026:0755
Red Hat Enterprise Linux 7 Extended Lifecycle Support

kernel-rt-0:3.10.0-1160.145.1.rt56.1297.el7

Fixed · RHSA-2026:0754
Red Hat Enterprise Linux 8

kernel-0:4.18.0-513.5.1.el8_9

Fixed · RHSA-2023:7077
Red Hat Enterprise Linux 8.2 Advanced Update Support

kernel-0:4.18.0-193.181.1.el8_2

Fixed · RHSA-2026:0643
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

kernel-0:4.18.0-305.183.1.el8_4

Fixed · RHSA-2026:0533
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

kernel-0:4.18.0-305.183.1.el8_4

Fixed · RHSA-2026:0533
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

kernel-0:4.18.0-372.175.1.el8_6

Fixed · RHSA-2026:0536
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

kernel-0:4.18.0-372.175.1.el8_6

Fixed · RHSA-2026:0536
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

kernel-0:4.18.0-372.175.1.el8_6

Fixed · RHSA-2026:0536
Red Hat Enterprise Linux 8.8 Telecommunications Update Service

kernel-0:4.18.0-477.124.1.el8_8

Fixed · RHSA-2026:0532
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

kernel-0:4.18.0-477.124.1.el8_8

Fixed · RHSA-2026:0532
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

kernel-0:5.14.0-70.161.1.el9_0

Fixed · RHSA-2026:0576
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

kernel-rt-0:5.14.0-70.161.1.rt21.233.el9_0

Fixed · RHSA-2026:0537
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

kernel-0:5.14.0-284.152.1.el9_2

Fixed · RHSA-2026:0535
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

kernel-rt-0:5.14.0-284.152.1.rt14.437.el9_2

Fixed · RHSA-2026:0534
Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 8

kernel-rt

Affected
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7 Extended Lifecycle Support	kernel-0:3.10.0-1160.145.1.el7	Fixed	RHSA-2026:0755
Red Hat Enterprise Linux 7 Extended Lifecycle Support	kernel-rt-0:3.10.0-1160.145.1.rt56.1297.el7	Fixed	RHSA-2026:0754
Red Hat Enterprise Linux 8	kernel-0:4.18.0-513.5.1.el8_9	Fixed	RHSA-2023:7077
Red Hat Enterprise Linux 8.2 Advanced Update Support	kernel-0:4.18.0-193.181.1.el8_2	Fixed	RHSA-2026:0643
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	kernel-0:4.18.0-305.183.1.el8_4	Fixed	RHSA-2026:0533
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	kernel-0:4.18.0-305.183.1.el8_4	Fixed	RHSA-2026:0533
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	kernel-0:4.18.0-372.175.1.el8_6	Fixed	RHSA-2026:0536
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	kernel-0:4.18.0-372.175.1.el8_6	Fixed	RHSA-2026:0536
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	kernel-0:4.18.0-372.175.1.el8_6	Fixed	RHSA-2026:0536
Red Hat Enterprise Linux 8.8 Telecommunications Update Service	kernel-0:4.18.0-477.124.1.el8_8	Fixed	RHSA-2026:0532
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	kernel-0:4.18.0-477.124.1.el8_8	Fixed	RHSA-2026:0532
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	kernel-0:5.14.0-70.161.1.el9_0	Fixed	RHSA-2026:0576
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	kernel-rt-0:5.14.0-70.161.1.rt21.233.el9_0	Fixed	RHSA-2026:0537
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	kernel-0:5.14.0-284.152.1.el9_2	Fixed	RHSA-2026:0535
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	kernel-rt-0:5.14.0-284.152.1.rt14.437.el9_2	Fixed	RHSA-2026:0534
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Affected	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

Red Hat statement

The ses_enclosure_data_process() routine did not sufficiently validate descriptor pointer positions before dereferencing them, which could allow the parser to read beyond the buffer when a device or crafted input reports malformed enclosure pages. The fix adds strict pointer and length checks to avoid out-of-bounds accesses.

Red Hat mitigation

To mitigate this issue, prevent module ses from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.

Metrics

0.21% 0.00215

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00215

Score over time

2025–2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.21% (0.00215)	10.78th	v5 (v2026.06.15)
Jun 15, 2026	0.14% (0.00137)	3.41th	v5 (v2026.06.15)
Oct 8, 2025	0.02% (0.00024)	5.32th	v4 (v2025.03.14)

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (13)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-53675		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2402293		Issue Tracking
https://git.kernel.org/stable/c/414418abc19fa4ccf730d273061a426c07a061d6		Patch
https://git.kernel.org/stable/c/4b8cae410472653a59e15af62c57c49b8e0a1201		Patch
https://git.kernel.org/stable/c/584892fd29a41ef424a148118a3103b16b94fb8c		Patch
https://git.kernel.org/stable/c/72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7		Patch
https://git.kernel.org/stable/c/79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19		Patch
https://git.kernel.org/stable/c/801ab13d50cf3d26170ee073ea8bb4eececb76ab		Patch
https://git.kernel.org/stable/c/c315560e3ef77c1d822249f1743e647dc9c9912a		Patch
https://git.kernel.org/stable/c/cffe09ca0555e235a42d6fa065e463c4b3d5b657		Patch
https://lore.kernel.org/linux-cve-announce/2025100707-CVE-2023-53675-e7ac@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-53675
https://www.cve.org/CVERecord?id=CVE-2023-53675