SB2025121086 - Out-of-bounds read in Linux kernel scsi driver
Published: December 10, 2025 Updated: December 12, 2025
Security Bulletin ID
SB2025121086
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2023-53803)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the ses_enclosure_data_process() function in drivers/scsi/ses.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0dfe68394cbe1d4fe579fb325ecc813c50528c5a
- https://git.kernel.org/stable/c/2b28a7d261cb309912596d6a2d383ca370483527
- https://git.kernel.org/stable/c/467afb1dd630d8c6d172bd6cacc125199b5f4f2d
- https://git.kernel.org/stable/c/799e8dd2022d2e13f0c5c1906b40ceca07a23349
- https://git.kernel.org/stable/c/9b4f5028e493cb353a5c8f5c45073eeea0303abd
- https://git.kernel.org/stable/c/9e5c7d52085b8c84bc82a261580f0eb170039325
- https://git.kernel.org/stable/c/da1a955c48a16e16e925d6544793914e52a6fa51
- https://git.kernel.org/stable/c/e4dd25da784b2e07dbfbf04509afa4c5a1375227
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.173