CVE-2026-46103 can: ucan: fix devres lifetime

🗓️ 27 May 2026 12:59:11Reported by LinuxType

Fixes devres lifetime for can ucan by tying resources to the USB interface and freeing the control message buffer on driver unbind.

Reporter	Title	Published	Views	Family All 57
ATTACKERKB	CVE-2026-46103	27 May 202612:59	–	attackerkb
CBLMariner	CVE-2026-46103 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
Circl	CVE-2026-46103	2 Jul 202606:52	–	circl
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-46103	27 May 202612:59	–	cve
Debian	[SECURITY] [DLA 4664-1] linux security update	3 Jul 202615:51	–	debian
Debian	[SECURITY] [DLA 4665-1] linux security update	3 Jul 202618:38	–	debian
Debian	[SECURITY] [DLA 4671-1] linux-6.1 security update	5 Jul 202618:24	–	debian
Debian CVE	CVE-2026-46103	27 May 202612:59	–	debiancve
Tenable Nessus	Debian dla-4664 : ata-modules-5.10.0-43-armmp-di - security update	3 Jul 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/can/usb/ucan.c"
    ],
    "versions": [
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "a90f0815aaa9c629ac4750e7c71c357dd7f231d7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "cb2e41e87a2893345859440017e7178bf7a4c70d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "3df5b9110ac08f67ccfe382fc172bfee95688eec",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "4b7d07747400cfd7eff1ba7b8b5a7c8d5a58f705",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "10b7b676b78a7bd888d19729b459aad7fc1f428b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "c524c124e3094d2de12235a513854c03d06a2b58",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "c0d3ccc6929e4509076df8f30a4fb1dc5018b0ae",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9f2d3eae88d26c29d96e42983b755940d9169cd9",
        "lessThan": "fed4626501c871890da287bec62a96e52da1af89",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/can/usb/ucan.c"
    ],
    "versions": [
      {
        "version": "4.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.86",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.27",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.4",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/c0d3ccc6929e4509076df8f30a4fb1dc5018b0ae
git	www.git.kernel.org/stable/c/c524c124e3094d2de12235a513854c03d06a2b58
git	www.git.kernel.org/stable/c/cb2e41e87a2893345859440017e7178bf7a4c70d
git	www.git.kernel.org/stable/c/4b7d07747400cfd7eff1ba7b8b5a7c8d5a58f705
git	www.git.kernel.org/stable/c/3df5b9110ac08f67ccfe382fc172bfee95688eec
git	www.git.kernel.org/stable/c/a90f0815aaa9c629ac4750e7c71c357dd7f231d7
git	www.git.kernel.org/stable/c/10b7b676b78a7bd888d19729b459aad7fc1f428b
git	www.git.kernel.org/stable/c/fed4626501c871890da287bec62a96e52da1af89

19 Jun 2026 11:59Current

EPSS0.00114