CVE-2023-53118

scsi: core: Fix a procfs host directory removal regression

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_hostdir_rm() decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsi_add_host_with_dma() change since scsi_add_host_with_dma() will return 0 (success) if scsi_proc_host_add() is called.

N/A

CVSS

Severity:

EPSS 0.03%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83
https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c
https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09
https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279
https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51
https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f

Frequently Asked Questions

What is the severity of CVE-2023-53118?: CVE-2023-53118 has not yet been assigned a CVSS score.
How to fix CVE-2023-53118?: To fix CVE-2023-53118, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-53118 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-53118 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-53118?: CVE-2023-53118 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.