CVE-2023-53521
published 2025-10-01CVE-2023-53521: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN…
PriorityP428high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.14%
3.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
A fix for:
BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses]
Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013
When edev->components is zero, accessing edev->component[0] members is
wrong.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 76f7050537476ac062ec23a544fbca8270f2d08b | 76f7050537476ac062ec23a544fbca8270f2d08b |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 87e47be38d205df338c52ead43f23b2864567423 | 87e47be38d205df338c52ead43f23b2864567423 |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 40af9a6deed723485e05b7d3255a28750692e8db | 40af9a6deed723485e05b7d3255a28750692e8db |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 8f9542cad6c27297c8391de3a659f0b7948495d0 | 8f9542cad6c27297c8391de3a659f0b7948495d0 |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 0595cdb587726b4f0fa780eb7462e3679d141e82 | 0595cdb587726b4f0fa780eb7462e3679d141e82 |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 82143faf01dda831b89eccef60c39ef8575ab08a | 82143faf01dda831b89eccef60c39ef8575ab08a |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 2fb1fa8425cce2dc4dce298275d22d7077694b73 | 2fb1fa8425cce2dc4dce298275d22d7077694b73 |
| linux | linux | >= 9927c68864e9c39cc317b4f559309ba29e642168 < 578797f0c8cbc2e3ec5fc0dab87087b4c7073686 | 578797f0c8cbc2e3ec5fc0dab87087b4c7073686 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 2.6.25 < 4.14.308 | 4.14.308 |
| linux | linux_kernel | >= 4.15 < 4.19.276 | 4.19.276 |
| linux | linux_kernel | >= 4.20 < 5.4.235 | 5.4.235 |
| linux | linux_kernel | >= 5.11 < 5.15.99 | 5.15.99 |
| linux | linux_kernel | >= 5.16 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 6.2 < 6.2.3 | 6.2.3 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
vendor_redhat·2025-10-01·CVSS 7.1
CVE-2023-53521 [HIGH] CWE-125 kernel: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
kernel: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
In the Linux kernel, the following vulnerability has been resolved:
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
A fix for:
BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses]
Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013
When edev->components is zero, accessing edev->component[0] members is
wrong.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 7) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 9) - Fix deferred
Debian
CVE-2023-53521: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: ses: ...
vendor_debian·2023·CVSS 7.1
CVE-2023-53521 [HIGH] CVE-2023-53521: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: ses: ...
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses] Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013 When edev->components is zero, accessing edev->component[0] members is wrong.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
OSV
CVE-2023-53521: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab
osv·2025-10-01·CVSS 7.1
CVE-2023-53521 [HIGH] CVE-2023-53521: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses] Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013 When edev->components is zero, accessing edev->component[0] members is wrong.
GHSA
GHSA-wgq5-3g38-q2mr: In the Linux kernel, the following vulnerability has been resolved:
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
A fix for:
BUG: KASAN: s
ghsa_unreviewed·2025-10-01
CVE-2023-53521 [HIGH] CWE-125 GHSA-wgq5-3g38-q2mr: In the Linux kernel, the following vulnerability has been resolved:
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
A fix for:
BUG: KASAN: s
In the Linux kernel, the following vulnerability has been resolved:
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
A fix for:
BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses]
Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013
When edev->components is zero, accessing edev->component[0] members is
wrong.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0595cdb587726b4f0fa780eb7462e3679d141e82https://git.kernel.org/stable/c/2fb1fa8425cce2dc4dce298275d22d7077694b73https://git.kernel.org/stable/c/40af9a6deed723485e05b7d3255a28750692e8dbhttps://git.kernel.org/stable/c/578797f0c8cbc2e3ec5fc0dab87087b4c7073686https://git.kernel.org/stable/c/76f7050537476ac062ec23a544fbca8270f2d08bhttps://git.kernel.org/stable/c/82143faf01dda831b89eccef60c39ef8575ab08ahttps://git.kernel.org/stable/c/87e47be38d205df338c52ead43f23b2864567423https://git.kernel.org/stable/c/8f9542cad6c27297c8391de3a659f0b7948495d0
2025-10-01
Published