---
id: CVE-2023-53675
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: ses: Fix possible desc_ptr out-of-bounds accesses

  Sanitize possible desc_ptr out-of-bounds accesses in
  ses_enclosure_data_process().
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: ses: Fix possible desc_ptr out-of-bounds accesses

  Sanitize possible desc_ptr out-of-bounds accesses in
  ses_enclosure_data_process().
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-125
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 2.6.25, < 4.14.308'
  - 'linux_kernel >= 4.15, < 4.19.276'
  - 'linux_kernel >= 4.20, < 5.4.235'
  - 'linux_kernel >= 5.5, < 5.10.173'
  - 'linux_kernel >= 5.11, < 5.15.99'
  - 'linux_kernel >= 5.16, < 6.1.16'
  - 'linux_kernel >= 6.2, < 6.2.3'
patched:
  - linux_kernel 6.2.3
published: '2025-10-07'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:45.780'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53675'
references:
  - url: 'https://git.kernel.org/stable/c/414418abc19fa4ccf730d273061a426c07a061d6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4b8cae410472653a59e15af62c57c49b8e0a1201'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/584892fd29a41ef424a148118a3103b16b94fb8c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/72021ae61a2bc6ca73cd593e255a10ed5f5dc5e7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/79ec5dd5fb07ecaea2f978c2d7a9f2f3526e4d19'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/801ab13d50cf3d26170ee073ea8bb4eececb76ab'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c315560e3ef77c1d822249f1743e647dc9c9912a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cffe09ca0555e235a42d6fa065e463c4b3d5b657'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.0022
epssPercentile: 0.12485
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:36:22.139938Z'
ingestedAt: '2026-10-15T22:48:25.414Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Sanitize possible desc_ptr out-of-bounds accesses in
ses_enclosure_data_process().

## Affected

- `linux_kernel >= 2.6.25, < 4.14.308`
- `linux_kernel >= 4.15, < 4.19.276`
- `linux_kernel >= 4.20, < 5.4.235`
- `linux_kernel >= 5.5, < 5.10.173`
- `linux_kernel >= 5.11, < 5.15.99`
- `linux_kernel >= 5.16, < 6.1.16`
- `linux_kernel >= 6.2, < 6.2.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.2.3`