CVE-2023-53803 Details
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271 Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.
A slab-out-of-bounds vulnerability has been identified in the Linux kernel's SCSI SES (SCSI Enclosure Services) subsystem. This issue arises in the function 'ses_enclosure_data_process', where the additional descriptor pointer is not properly sanitized before being accessed. The vulnerability was exposed by a task running 'systemd-udevd', leading to a read of size 1 from an invalid memory address. The flaw has been addressed by ensuring that the size is validated before the first access to the additional descriptor pointer, preventing the function from reading beyond the end of the allocated memory page.
Users can upgrade to the patched version of the Linux kernel available in the Linux Kernel Git Repository under the Stable branch. Instructions for downloading the latest stable kernel can be found in the official Linux kernel documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 9, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0dfe68394cbe1d4fe579fb325ecc813c50528c5a | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/2b28a7d261cb309912596d6a2d383ca370483527 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/467afb1dd630d8c6d172bd6cacc125199b5f4f2d | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/799e8dd2022d2e13f0c5c1906b40ceca07a23349 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/9b4f5028e493cb353a5c8f5c45073eeea0303abd | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/9e5c7d52085b8c84bc82a261580f0eb170039325 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/da1a955c48a16e16e925d6544793914e52a6fa51 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e4dd25da784b2e07dbfbf04509afa4c5a1375227 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 9, 2025 | New CVE Received | kernel.org |