7.8

CVE-2026-72120

can: bcm: add missing rcu list annotations and operations

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add missing rcu list annotations and operations

sashiko-bot remarked the missing use of list_add_rcu() in
bcm_[rx|tx]_setup() to have a proper initialized bcm_op structure
when bcm_proc_show() traverses the bcm_op's under rcu_read_lock().

To cover all initial settings of the bcm_op's the list_add_rcu() calls
are moved to the end of the setup code.

While at it, also fix the mirroring removal side: bcm_release() called
bcm_remove_op() - which frees the op via call_rcu() - on ops that were
still linked in bo->tx_ops/bo->rx_ops, without list_del_rcu() first.
Unlink each op with list_del_rcu() before handing it to bcm_remove_op(),
matching the existing pattern in bcm_delete_tx_op()/bcm_delete_rx_op().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 659701c0b954ccdb4a916a4ad59bbc16e726d42c
Version < 8357255e56dc1aaa437e3c53ee9385de984e0d57
Status affected
Version 0622846db728a5332b917c797c733e202c4620ae
Version < 8e1c7257c81577130f5ce90f69b2a2c3ce63f957
Status affected
Version 6d7d458c41b98a5c1670cbd36f2923c37de51cf5
Version < eb1c26eab4d1f0b4450439b4b88c3e73faf1da98
Status affected
Version 1f912f8484e9c4396378c39460bbea0af681f319
Version < f53bdab85e64eb57d6899a30d1307fd5a3639cc7
Status affected
Version 63567ecd99a24495208dc860d50fb17440043006
Version < 4e22e8b505f877573bbdfdbcb680babad9b2f7a1
Status affected
Version dac5e6249159ac255dad9781793dbe5908ac9ddb
Version < b06a4a397ac826603f39875cb7c7819a41365196
Status affected
Version dac5e6249159ac255dad9781793dbe5908ac9ddb
Version < 30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d
Status affected
Version dac5e6249159ac255dad9781793dbe5908ac9ddb
Version < 7b2c3eabc4dafc062a25e10711154f2107526a78
Status affected
Version 19f553a1ddf260da6570ed8f8d91a8c87f49b63a
Status affected
Version 7c9db92d5f0eadca30884af75c53d601edc512ee
Status affected
Version 5.10.238
Version < 5.10.261
Status affected
Version 5.15.185
Version < 5.15.212
Status affected
Version 6.1.141
Version < 6.1.178
Status affected
Version 6.6.93
Version < 6.6.145
Status affected
Version 6.12.31
Version < 6.12.97
Status affected
Version 5.4.294
Version < 5.5
Status affected
Version 6.14.9
Version < 6.15
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.15
Status affected
Version 0
Version < 6.15
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/8357255e56dc1aaa437e3c53ee9385de984e0d57
https://git.kernel.org/stable/c/8e1c7257c81577130f5ce90f69b2a2c3ce63f957
https://git.kernel.org/stable/c/eb1c26eab4d1f0b4450439b4b88c3e73faf1da98
https://git.kernel.org/stable/c/f53bdab85e64eb57d6899a30d1307fd5a3639cc7
https://git.kernel.org/stable/c/4e22e8b505f877573bbdfdbcb680babad9b2f7a1
https://git.kernel.org/stable/c/b06a4a397ac826603f39875cb7c7819a41365196
https://git.kernel.org/stable/c/30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1d
https://git.kernel.org/stable/c/7b2c3eabc4dafc062a25e10711154f2107526a78