What’s Vulnerable › Vulnerabilities

CVE-2023-53118: scsi: core: Fix a procfs host directory removal regression

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-02 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_hostdir_rm() decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsi_add_host_with_dma() change since scsi_add_host_with_dma() will return 0 (success) if scsi_proc_host_add() is called.

Affected products

• Linux kernel: from 4.19.278 before 4.20; 5.4.237, 5.10.175, 5.15.103, 6.1.20, 6.2.7, 6.3-rc1 (+1) — fixed in 4.20

How to fix

Upgrade to a fixed version: Linux kernel 4.20. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09
• https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c
• https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51
• https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279
• https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83
• https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f

Get alerted when CVE-2023-53118 or the next vulnerability affects your stack