CVE-2023-53521

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to SCSI subsystem session management. Specifically, an out-of-bounds read can occur within the ses intf remove() function when the number of components is zero, leading to a potential kernel crash. The issue arises when accessing members of edev->component[0] when edev->components is zero. This condition can be triggered during module removal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.