CVE-2023-7324

In the Linux kernel, the following vulnerability has been resolved:

scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses

Sanitize possible addl_desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

The SES enclosure parser could read past the end of the additional descriptor buffer (page10) due to missing length checks. The fix passes max_desc_len into ses_process_descriptor(), adds per-branch minimum-length guards, and nulls addl_desc_ptr on failure, preventing OOB reads. Practical impact is local DoS during SES page parsing; triggering typically requires privileged access to SCSI enclosure controls.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.