281 matches found
CVE-2023-54105 can: isotp: check CAN address family in isotp_bind()
In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotpbind Add missing check to block non-AFCAN binds. Syzbot created some code which matched the right sockaddr struct size but used AFXDP 0x2C instead of AFCAN 0x1D in the address family...
CVE-2025-68343
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing header The driver expects to receive a struct gshostframe in gsusbreceivebulkcallback. Use structgroup to describe the header of the struct gshostframe and...
SUSE CVE-2025-40107
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled This issue is similar to the vulnerability in the mcp251x driver, which was fixed in commit 03c427147b2d "can: mcp251x: fix resume fr...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Can: kvaserpciefd: refined error-prone handling of echoskbmax echoskbmax should define the supported upper limit for echoskb, which is allocated within the private space of the netdevice. The corresponding size value provided ...
CVE-2025-39987
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the PFPACKET...
CVE-2025-39987 can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypass the CAN framework logic and to directly reach the xmit function of a CAN driver. The only check which is performed by the PFPACKET...
EUVD-2017-6414
Malware in sbrugna...
EUVD-2020-21813
Malware in sbrugna...
EUVD-2015-5564
Malware in sbrugna...
EUVD-2020-29405
Malware in sbrugna...
EUVD-2025-28895
Malicious code in bioql PyPI...
EUVD-2025-12775
Malicious code in bioql PyPI...
EUVD-2023-43720
Malicious code in bioql PyPI...
EUVD-2023-44360
Malicious code in bioql PyPI...
EUVD-2023-32961
Malicious code in bioql PyPI...
can: j1939: implement NETDEV_UNREGISTER notification handler
...
UBUNTU-CVE-2023-53523
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: fix time stamp counter initialization If the gsusb device driver is unloaded or unbound before the interface is shut down, the USB stack first calls the struct usbdriver::disconnect and then the struct...
CVE-2023-53523 can: gs_usb: fix time stamp counter initialization
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: fix time stamp counter initialization If the gsusb device driver is unloaded or unbound before the interface is shut down, the USB stack first calls the struct usbdriver::disconnect and then the struct...
Linux net/can/bcm.c Buffer Overflow DoS
The vulnerability in the net/can/bcm.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...
Linux net/can/bcm.c Buffer Overflow DoS
The vulnerability of the net/can/bcm.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...