CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

CVE-2026-80706

CVE-2026-80706 affects the Linux kernel's can: softing CAN bus driver. The vulnerability resides in fw_parse(), which reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob, allowing a truncated record to cause out-of-bounds ...