CVE-2023-52596: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52596 is a vulnerability discovered in the Linux kernel's sysctl subsystem, specifically related to out-of-bounds access for empty sysctl registers. The issue was disclosed on March 6, 2024, affecting Linux kernel versions up to 6.6.16 and from 6.7 up to 6.7.4 (NVD).

The vulnerability occurs when registering tables to the sysctl subsystem. There is a check to determine if a header is a permanently empty directory (used for mounts), which evaluates the first element of the ctl_table. This results in an out-of-bounds evaluation when registering empty directories. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access requirements and potential high impact on availability (NVD).

The vulnerability can lead to a system crash when exploited, primarily affecting system availability. The CVSS scoring indicates no impact on confidentiality or integrity, but a high impact on system availability (NVD).

The vulnerability requires local access with low complexity and low privileges to exploit. No user interaction is required for exploitation (NVD).

The vulnerability has been resolved by modifying the register_sysctl_mount_point function to pass a ctl_table of size 1 instead of size 0, and now relies solely on the type to identify a permanently empty register. The fix ensures that the ctl_table has at least one element before testing for permanent emptiness (NVD).