CVE-2023-53118
Estado: AnalizadaMedia (5.5)—
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Fix a procfs host directory removal regression
scsi_proc_hostdir_rm() decreases a reference counter and hence must only be called once per host that is removed. This change does not require a scsi_add_host_with_dma() change since scsi_add_host_with_dma() will return 0 (success) if scsi_proc_host_add() is called.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09
- https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c
- https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51
- https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279
- https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83
- https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-53118",
"cveTags": [],
"metrics": {
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "891a3cba425cf483d96facca55aebd6ff1da4338",
"lessThan": "88c3d3bb6469cea929ac68fd326bdcbefcdfdd83",
"versionType": "git"
},
{
"status": "affected",
"version": "6b223e32d66ca9db1f252f433514783d8b22a8e1",
"lessThan": "68c665bb185037e7eb66fb792c61da9d7151e99c",
"versionType": "git"
},
{
"status": "affected",
"version": "e471e928de97b00f297ad1015cc14f9459765713",
"lessThan": "2a764d55e938743efa7c2cba7305633bcf227f09",
"versionType": "git"
},
{
"status": "affected",
"version": "17e98a5ede81b7696bec421f7afa2dfe467f5e6b",
"lessThan": "7e0ae8667fcdd99d1756922e1140cac75f5fa279",
"versionType": "git"
},
{
"status": "affected",
"version": "1ec363599f8346d5a8d08c71a0d9860d6c420ec0",
"lessThan": "73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51",
"versionType": "git"
},
{
"status": "affected",
"version": "fc663711b94468f4e1427ebe289c9f05669699c9",
"lessThan": "be03df3d4bfe7e8866d4aa43d62e648ffe884f5f",
"versionType": "git"
},
{
"status": "affected",
"version": "13daafe1e209b03e9bda16ff2bd2b2da145a139b",
"versionType": "git"
},
{
"status": "affected",
"version": "4.19.278",
"lessThan": "4.20",
"versionType": "semver"
}
],
"programFiles": [
"drivers/scsi/hosts.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.4.237",
"lessThan": "5.4.238",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.175",
"lessThan": "5.10.176",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.103",
"lessThan": "5.15.104",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.20",
"lessThan": "6.1.21",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.2.7",
"lessThan": "6.2.8",
"versionType": "semver"
}
],
"programFiles": [
"drivers/scsi/hosts.c"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2025-05-02T16:15:30.880",
"references": [
{
"url": "https://git.kernel.org/stable/c/2a764d55e938743efa7c2cba7305633bcf227f09",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/68c665bb185037e7eb66fb792c61da9d7151e99c",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/73f030d4ef6d1ad17f824a0a2eb637ef7a9c7d51",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7e0ae8667fcdd99d1756922e1140cac75f5fa279",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/88c3d3bb6469cea929ac68fd326bdcbefcdfdd83",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/be03df3d4bfe7e8866d4aa43d62e648ffe884f5f",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Fix a procfs host directory removal regression\n\nscsi_proc_hostdir_rm() decreases a reference counter and hence must only be\ncalled once per host that is removed. This change does not require a\nscsi_add_host_with_dma() change since scsi_add_host_with_dma() will return\n0 (success) if scsi_proc_host_add() is called."
},
{
"lang": "es",
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: core: Se corrige una regresión de eliminación del directorio del host procfs. scsi_proc_hostdir_rm() disminuye un contador de referencias y, por lo tanto, solo debe llamarse una vez por cada host eliminado. Este cambio no requiere modificar scsi_add_host_with_dma(), ya que scsi_add_host_with_dma() devolverá 0 (éxito) si se llama a scsi_proc_host_add()."
}
],
"lastModified": "2026-06-17T06:44:20.023",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35867D8C-C60E-45C2-8EE9-39A4E3EF91F3",
"versionEndExcluding": "4.20",
"versionStartIncluding": "4.19.278"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.4.237:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0C4A400-BF1C-4D41-98B3-E639419C1B25"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.10.175:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "344E76D2-2659-4379-ADF2-01C772925245"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15.103:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A848597-242F-43EC-9D61-6A2B2C98F7B8"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36E6ECBE-C10D-40AF-B0FA-2EF41789D2EE"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CF554BC-2C12-456C-BECE-A85F92BF95FA"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}