CVE-2023-52845: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52845 affects the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem. The vulnerability was discovered when syzbot reported an uninitialized value access issue in the bearer-related names handling. The issue stems from the way TIPC handles bearer-related names, including link names, which must be null-terminated strings (Kernel Git).

The vulnerability occurs when a link name that is not null-terminated is passed through netlink, causing strstr() and similar functions to potentially cause buffer overrun. The issue manifests in the TIPC netlink interface where bearer-related names were using NLA_STRING instead of NLA_NUL_STRING in the nla_policy definition. This could lead to uninitialized value access in the strlen function, as detected by the Kernel Memory Sanitizer (KMSAN) (Kernel Git).

The vulnerability could potentially lead to buffer overruns when processing non-null-terminated strings in the TIPC subsystem. This affects the kernel's memory handling and could result in system instability or potential security implications when processing bearer-related names (Kernel Git).

The vulnerability was discovered through automated testing by syzbot, which reported uninit-value access issues. Two specific instances were reported and confirmed, indicating the vulnerability could be triggered through the TIPC netlink interface (Kernel Git).

The issue has been patched by changing the nla_policy for bearer-related names from NLA_STRING to NLA_NUL_STRING. This ensures that only null-terminated strings are accepted as bearer-related names, preventing the potential buffer overrun condition. The fix has been implemented in the Linux kernel codebase (Kernel Git).