5.5

CVE-2026-23362

can: bcm: fix locking for bcm_op runtime updates

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: fix locking for bcm_op runtime updates

Commit c2aba69d0c36 ("can: bcm: add locking for bcm_op runtime updates")
added a locking for some variables that can be modified at runtime when
updating the sending bcm_op with a new TX_SETUP command in bcm_tx_setup().

Usually the RX_SETUP only handles and filters incoming traffic with one
exception: When the RX_RTR_FRAME flag is set a predefined CAN frame is
sent when a specific RTR frame is received. Therefore the rx bcm_op uses
bcm_can_tx() which uses the bcm_tx_lock that was only initialized in
bcm_tx_setup(). Add the missing spin_lock_init() when allocating the
bcm_op in bcm_rx_setup() to handle the RTR case properly.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.4.294 < 5.5
Linux ≫ Linux Kernel Version >= 5.10.238 < 5.10.253
Linux ≫ Linux Kernel Version >= 5.15.185 < 5.15.203
Linux ≫ Linux Kernel Version >= 6.1.141 < 6.1.167
Linux ≫ Linux Kernel Version >= 6.6.93 < 6.6.130
Linux ≫ Linux Kernel Version >= 6.12.31 < 6.12.77
Linux ≫ Linux Kernel Version >= 6.14.9 < 6.15
Linux ≫ Linux Kernel Version >= 6.15.1 < 6.18.17
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.7
Linux ≫ Linux Kernel Version6.15 Update-
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
Linux ≫ Linux Kernel Version7.0 Updaterc3
Linux ≫ Linux Kernel Version7.0 Updaterc4
Linux ≫ Linux Kernel Version7.0 Updaterc5
Linux ≫ Linux Kernel Version7.0 Updaterc6
Linux ≫ Linux Kernel Version7.0 Updaterc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.008
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-667 Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

https://git.kernel.org/stable/c/800f26f11ae37b17f58e0001f28a47dd75c26557
Patch
https://git.kernel.org/stable/c/70e951afad4c025261fe3c952d2b07237e320a01
Patch
https://git.kernel.org/stable/c/8bcf2d847adb82b2c617456f6da17ac5e6c75285
Patch
https://git.kernel.org/stable/c/8215ba7bc99e84e66fd6938874ec4330a9d96518
Patch
https://git.kernel.org/stable/c/f0c349b2c21b220af5ba19f29b885e222958d796
Patch
https://git.kernel.org/stable/c/c35636e91e392e1540949bbc67932167cb48bc3a
Patch
https://git.kernel.org/stable/c/0904037e713f787d1376e1d349c3bdf6c3105881
Patch
https://git.kernel.org/stable/c/c85b96eaf766d8f066b1139a17a51efa2f6627ef
Patch