Back to CVE records
High 8.8Published Oct 7, 2025
CVE-2023-53675scsi: ses: Fix possible desc_ptr out-of-bounds accesses
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_ptr out-of-bounds accesses Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 9927c68864e9c39cc317b4f559309ba29e642168 before 72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7; from 9927c68864e9c39cc317b4f559309ba29e642168 before cffe09ca0555e235a42d6fa065e463c4b3d5b657; 9927c68864e9c39cc317b4f559309ba29e642168 builds before 79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19; from 9927c68864e9c39cc317b4f559309ba29e642168 before c315560e3ef77c1d822249f1743e647dc9c9912a; from 9927c68864e9c39cc317b4f559309ba29e642168 before 584892fd29a41ef424a148118a3103b16b94fb8c; from 9927c68864e9c39cc317b4f559309ba29e642168 before 414418abc19fa4ccf730d273061a426c07a061d6; 9927c68864e9c39cc317b4f559309ba29e642168 builds before 4b8cae410472653a59e15af62c57c49b8e0a1201; 9927c68864e9c39cc317b4f559309ba29e642168 builds before 801ab13d50cf3d26170ee073ea8bb4eececb76ab | CNA record |
linux linux_kernel linux:linux_kernel | from 2.6.25 before 4.14.308; from 4.15 before 4.19.276; from 4.20 before 5.4.235; from 5.5 before 5.10.173; from 5.11 before 5.15.99; from 5.16 before 6.1.16; from 6.2 before 6.2.3 | NVD |
References
- https://git.kernel.org/stable/c/72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7patch
- https://git.kernel.org/stable/c/cffe09ca0555e235a42d6fa065e463c4b3d5b657patch
- https://git.kernel.org/stable/c/79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19patch
- https://git.kernel.org/stable/c/c315560e3ef77c1d822249f1743e647dc9c9912apatch
- https://git.kernel.org/stable/c/584892fd29a41ef424a148118a3103b16b94fb8cpatch
- https://git.kernel.org/stable/c/414418abc19fa4ccf730d273061a426c07a061d6patch
- https://git.kernel.org/stable/c/4b8cae410472653a59e15af62c57c49b8e0a1201patch
- https://git.kernel.org/stable/c/801ab13d50cf3d26170ee073ea8bb4eececb76abpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.