SB20251001184 - Input validation error in Linux kernel scsi driver
Published: October 1, 2025 Updated: October 27, 2025
Security Bulletin ID
SB20251001184
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2023-53521)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the ses_intf_remove_enclosure() function in drivers/scsi/ses.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0595cdb587726b4f0fa780eb7462e3679d141e82
- https://git.kernel.org/stable/c/2fb1fa8425cce2dc4dce298275d22d7077694b73
- https://git.kernel.org/stable/c/40af9a6deed723485e05b7d3255a28750692e8db
- https://git.kernel.org/stable/c/578797f0c8cbc2e3ec5fc0dab87087b4c7073686
- https://git.kernel.org/stable/c/76f7050537476ac062ec23a544fbca8270f2d08b
- https://git.kernel.org/stable/c/82143faf01dda831b89eccef60c39ef8575ab08a
- https://git.kernel.org/stable/c/87e47be38d205df338c52ead43f23b2864567423
- https://git.kernel.org/stable/c/8f9542cad6c27297c8391de3a659f0b7948495d0
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.173