Out-of-Bounds Access Vulnerability in Linux Kernel's SCSI SES Component

CVE-2023-53675

What is CVE-2023-53675?

A vulnerability exists in the Linux kernel related to the SCSI SES (SCSI Enclosure Services) component, where improper sanitization of pointer accesses can lead to out-of-bounds memory access. This flaw, found in the ses_enclosure_data_process() function, poses risks as it may allow attackers to exploit such conditions, potentially leading to memory corruption or system instability. The issue has been addressed by implementing stricter controls to sanitize pointer accesses, ensuring stability and security within the affected systems.

References