Out-of-bounds Access in Linux Kernel SCSI Implementation

CVE-2023-7324

What is CVE-2023-7324?

A vulnerability in the Linux kernel's SCSI implementation could lead to potential out-of-bounds access issues. Specifically, the vulnerability arises in the 'ses_enclosure_data_process()' function, where there is a risk of accessing memory beyond the allocated bounds for additional descriptor pointers. This vulnerability has been addressed through sanitization measures, enhancing the security and stability of the kernel. Users are encouraged to update their systems to incorporate the latest security patches that resolve these issues.

References