CVE-2023-53118

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Fix a procfs host directory removal regression

scsi_proc_hostdir_rm() decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsi_add_host_with_dma() change since scsi_add_host_with_dma() will return 0 (success) if scsi_proc_host_add() is called.

Fixes a regression where scsi_proc_hostdir_rm() could be called multiple times, incorrectly decreasing a reference counter during SCSI host removal. Triggered only in specific device teardown sequences. Requires elevated privileges and precise timing. Not exploitable by unprivileged users. No confidentiality or integrity impact, so only availability affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.