CVE-2023-7324 — Linux vulnerability

6 documents5 sources
Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 88.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 29

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible addl_desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

Affected Packages4 packages

▶Linuxlinux/linux_kernel2.6.25 — 4.14.308+6
▶Debianlinux/linux_kernel< 5.10.178-1+3
▶CVEListV5linux/linux9927c68864e9c39cc317b4f559309ba29e642168 — af5114d824f3511a69d68beff49ca9a7c32d44e0+8
▶debiandebian/linux< linux 6.1.20-1 (bookworm)

🔴Vulnerability Details

3
OSV
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses↗2025-10-29
▶
GHSA
GHSA-jc99-58pq-g6c3: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible a↗2025-10-29
▶
OSV
CVE-2023-7324: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible add↗2025-10-29
▶

📋Vendor Advisories

2
Red Hat
kernel: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses↗2025-10-29
▶
Debian
CVE-2023-7324: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: ses: ...↗2023
▶