CVE-2023-53118

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53118
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_hostdir_rm() decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsi_add_host_with_dma() change since scsi_add_host_with_dma() will return 0 (success) if scsi_proc_host_add() is called.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09 Patch
https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c Patch
https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51 Patch
https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279 Patch
https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83 Patch
https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4.237:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10.175:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15.103:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1.20:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2.7:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
History

10 Nov 2025, 17:51

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09 - () https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09 - Patch
References () https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c - () https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c - Patch
References () https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51 - () https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51 - Patch
References () https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279 - () https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279 - Patch
References () https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83 - () https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83 - Patch
References () https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f - () https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f - Patch
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:6.2.7:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10.175:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1.20:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15.103:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4.237:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

05 May 2025, 20:54

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: core: Se corrige una regresión de eliminación del directorio del host procfs. scsi_proc_hostdir_rm() disminuye un contador de referencias y, por lo tanto, solo debe llamarse una vez por cada host eliminado. Este cambio no requiere modificar scsi_add_host_with_dma(), ya que scsi_add_host_with_dma() devolverá 0 (éxito) si se llama a scsi_proc_host_add().

02 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-02 16:15

Updated : 2025-11-10 17:51

NVD link : CVE-2023-53118

Mitre link : CVE-2023-53118

CVE.ORG link : CVE-2023-53118

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other