CVE-2023-52596

MEDIUM

Linux Kernel < 6.6.16 - Out-of-bounds Write in sysctl Register Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix out of bounds access for empty sysctl registers When registering tables to the sysctl subsystem there is a check to see if header is a permanently empty directory (used for mounts). This check evaluates the first element of the ctl_table. This results in an out of bounds evaluation when registering empty directories. The function register_sysctl_mount_point now passes a ctl_table of size 1 instead of size 0. It now relies solely on the type to identify a permanently empty register. Make sure that the ctl_table has at least one element before testing for permanent emptiness.

Scores

CVSS v3 5.5
EPSS 0.0023
EPSS Percentile 13.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-787
Status published
Products (9)
Linux/Linux < 6.6
Linux/Linux 6.6
Linux/Linux 6.6.16 - 6.6.*
Linux/Linux 6.7.4 - 6.7.*
Linux/Linux 6.8
Linux/Linux 9edbfe92a0a1355bae1e47c8f542ac0d39f19f8c - 15893975e9e382f8294ea8d926f08dc2d8d39ede
Linux/Linux 9edbfe92a0a1355bae1e47c8f542ac0d39f19f8c - 2ae7081bc10123b187e36a4f3a8e53768de31489
Linux/Linux 9edbfe92a0a1355bae1e47c8f542ac0d39f19f8c - 315552310c7de92baea4e570967066569937a843
linux/linux_kernel < 6.6.16
Published Mar 06, 2024
Tracked Since Feb 18, 2026