Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52596
HistoryMar 06, 2024 - 12:00 a.m.

CVE-2023-52596

2024-03-0600:00:00
ubuntu.com
ubuntu.com
4
linux kernel
vulnerability
sysctl
out of bounds access
empty sysctl registers
register_sysctl_mount_point

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: sysctl:
Fix out of bounds access for empty sysctl registers When registering tables
to the sysctl subsystem there is a check to see if header is a permanently
empty directory (used for mounts). This check evaluates the first element
of the ctl_table. This results in an out of bounds evaluation when
registering empty directories. The function register_sysctl_mount_point now
passes a ctl_table of size 1 instead of size 0. It now relies solely on the
type to identify a permanently empty register. Make sure that the ctl_table
has at least one element before testing for permanent emptiness.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%