In the Linux kernel, the following vulnerability has been resolved:
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
A fix for:
BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task systemd-udevd/3271
Checking after (and before in next loop) addl_desc_ptr[1] is sufficient, we expect the size to be sanitized before first access to addl_desc_ptr[1]. Make sure we don't walk beyond end of page.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-riscv-5.15Upgrade linux-realtimeUpgrade linux-azure-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-fipsUpgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-iotUpgrade linux-nvidia-tegraUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-bluefieldUpgrade linux-ibm-5.4 | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub