Loading story…
Red Hat has detailed CVE-2023-53675, a moderate-severity out-of-bounds read in the Linux kernel's SCSI Enclosure Services (SES) driver. The flaw arises because ses_enclosure_data_process() does not adequately validate descriptor-pointer positions while parsing enclosure data, allowing malformed enclosure pages to trigger reads beyond the intended buffer.
A local low-privileged user could exploit the issue to crash an affected system during enclosure-data processing, resulting in denial of service; Red Hat's assessment also notes possible confidentiality and integrity effects. Kernel fixes are available for affected Red Hat Enterprise Linux 7 and 8 support streams, while organizations unable to patch immediately can mitigate exposure by preventing the ses kernel module from loading.
See affected versions and whether adversaries are exploiting it.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2026:0754 and RHSA-2026:0755, providing fixed kernel-rt and kernel packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat issued RHSA-2026:0643 with a fixed kernel package for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat issued RHSA-2026:0532, RHSA-2026:0533, and RHSA-2026:0536, providing fixed kernel packages for affected RHEL 8.4, 8.6, and 8.8 specialized support streams.
Red Hat published its record for CVE-2023-53675, describing an out-of-bounds read in the Linux kernel SES driver that a low-privileged local user could trigger to cause a denial of service.
Red Hat issued RHSA-2023:7077 with fixed kernel packages for Red Hat Enterprise Linux 8 support streams, addressing the SES-driver out-of-bounds read vulnerability.
The Linux kernel CVE team identified possible desc_ptr out-of-bounds accesses in the SES driver's ses_enclosure_data_process() function and documented remediation commits across stable kernel releases 4.14.308 through 6.3. It recommended updating to a current stable kernel release rather than applying individual commits.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2023-6610** is an out-of-bounds read in the Linux kernel SMB client’s `smb2_dump_detail` function in `fs/smb/client/smb2ops.c`. A local low-privileged attacker can trigger the flaw without user interaction, potentially causing a system crash or disclosing internal kernel memory. The issue is tracked in the Linux kernel Bugzilla as **218219** and is categorized as CWE-125. Red Hat rated the vulnerability **7.1 CVSS v3.1** and released fixes for affected Red Hat Enterprise Linux 8 and 9 kernel packages, related Extended Update Support releases, Red Hat Virtualization 4 for RHEL 8, and identified affected OpenShift Logging components. Organizations should apply vendor kernel updates; where patching cannot occur immediately, Red Hat recommends preventing the `cifs` kernel module from loading.
Aug 27, 2026
A vulnerability tracked as **CVE-2023-46813** affects the Linux kernel's handling of AMD Secure Encrypted Virtualization (SEV) guests. A low-privileged local user in an SEV virtual machine can use MMIO/string I/O exception-emulation paths to trigger a buffer overflow or null-pointer dereference, potentially causing a denial of service or escalating privileges. Red Hat rates the issue **CVSS 7.0** and categorizes it as improper privilege management (`CWE-269`). Linux fixed the flaw by adding validation in the x86 SEV exception-emulation code before string I/O reads and writes. The new `vc_insn_string_check()` rejects user-space I/O operations whose addresses point into kernel space and raises a user page fault instead. Red Hat issued fixes for affected RHEL 8 and RHEL 9 kernel variants and Red Hat Virtualization 4 on RHEL 8; it reported no generally suitable mitigation beyond applying the relevant updates.
Aug 26, 2026
**CVE-2025-38684** is a moderate-severity flaw in the Linux kernel's Enhanced Transmission Selection (ETS) traffic-control scheduler. A faulty update sequence in `ets_qdisc_change()` updates `q->nbands` before unused DWRR classes are purged, leaving cleanup logic to operate on an inconsistent ETS configuration and potentially dereference a NULL pointer. A local attacker can trigger a kernel crash, resulting in denial of service; Red Hat rates the issue CVSS 5.2, while NVD assigns 5.5. Red Hat has released fixes for standard kernels in RHEL 8, RHEL 9, and RHEL 10. Fixes for the RHEL 8 and RHEL 9 real-time kernels remain deferred, while RHEL 6, RHEL 7, and the RHEL 7 real-time kernel are not affected because they lack the vulnerable code. Organizations using affected kernel packages should apply the available updates and plan mitigation for affected real-time deployments until fixes are released.
Aug 26, 2026