PT-2024-14641 · Linux+2 · Linux Kernel+2

Oliver Sang · Published 2023-11-21 · Updated 2026-03-14 · CVE-2023-52596

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out of bounds access for empty sysctl registers in the Linux kernel. When registering tables to the sysctl subsystem, there is a check to see if the header is a permanently empty directory. This check evaluates the first element of the ctl table, resulting in an out of bounds evaluation when registering empty directories. The function register sysctl mount point now passes a ctl table of size 1 instead of size 0, relying solely on the type to identify a permanently empty register. It is essential to ensure that the ctl table has at least one element before testing for permanent emptiness.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

AZL-56819

BDU:2025-14284

CVE-2023-52596

ECHO-1558-C364-90EE

Affected Products

Astra Linux

Debian

Linux Kernel

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52596.json · Exploit
• https://ubuntu.com/security/CVE-2023-52596 · Vendor Advisory
• https://git.kernel.org/stable/c/315552310c7de92baea4e570967066569937a843 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52596 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52596 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-52596 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52596 · Vendor Advisory
• https://git.kernel.org/stable/c/2ae7081bc10123b187e36a4f3a8e53768de31489 · Patch
• https://git.kernel.org/stable/c/15893975e9e382f8294ea8d926f08dc2d8d39ede · Patch
• https://osv.dev/vulnerability/AZL-56819 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14284 · Security Note
• https://osv.dev/vulnerability/CVE-2023-52596 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-52596 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52596 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52596 · Vendor Advisory