PT-2026-72303

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the can: bcm module where the bcm rx setup function fails to validate the frame length for RTR Remote Transmission Request replies configured via RX SETUP with RX RTR...

kernel: can: bcm: thrtimer use-after-free during RX operation teardown

A use-after-free flaw was found in the Linux kernel's CAN BCM Broadcast Manager subsystem. During RX operation teardown, a concurrent receive handler can race and re-arm the throttle timer after the operation has been scheduled for deallocation. When the deallocation completes, the timer is still...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper cleanup of bo-bcmprocread in the bcm subsystem of the can protocol, which may trigger an unnecessar...

SUSE CVE-2021-3609

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root...

CVE-2021-3609

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root...