In the Linux kernel, the following vulnerability has been resolved:

sysctl: Fix out of bounds access for empty sysctl registers

When registering tables to the sysctl subsystem there is a check to see
if header is a permanently empty directory (used for mounts). This check
evaluates the first element of the ctl_table. This results in an out of
bounds evaluation when registering empty directories.

The function register_sysctl_mount_point now passes a ctl_table of size
1 instead of size 0. It now relies solely on the type to identify
a permanently empty register.

Make sure that the ctl_table has at least one element before testing for
permanent emptiness.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0001.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
9edbfe92a0a1355bae1e47c8f542ac0d39f19f8c affected < 15893975e9e382f8294ea8d926f08dc2d8d39ede
9edbfe92a0a1355bae1e47c8f542ac0d39f19f8c affected < 2ae7081bc10123b187e36a4f3a8e53768de31489
9edbfe92a0a1355bae1e47c8f542ac0d39f19f8c affected < 315552310c7de92baea4e570967066569937a843
Linux Linux affected
Version Status Constraints
6.6 affected —
0 unaffected < 6.6
6.6.16 unaffected ≤ 6.6.*
6.7.4 unaffected ≤ 6.7.*
6.8 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/15893975e9e382f8294ea8d926f08dc2d8d39ede cve-icon cve-icon
https://git.kernel.org/stable/c/2ae7081bc10123b187e36a4f3a8e53768de31489 cve-icon cve-icon
https://git.kernel.org/stable/c/315552310c7de92baea4e570967066569937a843 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024030645-CVE-2023-52596-b98e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52596 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52596 cve-icon
History

Tue, 15 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00018}

 epss

{'score': 0.0001}

Fri, 14 Feb 2025 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-787
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 04 Nov 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 17 Sep 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:16:28.158Z

Reserved: 2024-03-02T21:55:42.571Z

Link: CVE-2023-52596

cve-icon Vulnrichment

Updated: 2024-08-02T23:03:21.269Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-06T07:15:09.657

Modified: 2025-02-14T16:40:33.420

Link: CVE-2023-52596

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-03-06T00:00:00Z

Links: CVE-2023-52596 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses