Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The can: hi311x module has corrected the ndochangemtu function to prevent buffer overflows. Sending a PFPACKET allows bypassing the CAN driver’s logic and directly reaching the xmit function of the CAN driver. The only check...

Astra Linux – Vulnerability in Linux, Linux 5.10

The function emsusbstartxmit in the file drivers/net/can/usb/emsusb.c within the Linux kernel, up to version 5.17.1, contains a double-free...

CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

The vulnerability of the ems_usb_read_bulk_callback() function in the drivers/net/can/usb/ems_usb.c module of the Linux network device driver allows a attacker to cause a service failure.

The vulnerability of the emsusbreadbulkcallback function in the drivers/net/can/usb/emsusb.c module of the Linux network device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the gs_usb_receive_bulk_callback() function in the drivers/net/can/usb/gs_usb.c file of the Linux kernel’s CAN network device driver allows a hacker to induce a service failure.

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-74455

A flaw was found in the Linux kernel's peakusb Controller Area Network CAN driver. This vulnerability arises from insufficient validation of uCAN receive record lengths when processing data from a Universal Serial Bus USB receive buffer. A local attacker could potentially exploit this by sending...

CVE-2026-72116

A flaw was found in the Linux kernel's Broadcom Controller Area Network CAN bus driver. When a CAN device is removed, the driver may fail to properly manage its receive and transmit operations. This can lead to receive filters not being correctly re-enabled after updates, preventing expected data...

CVE-2026-72114

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcom bcm driver. This vulnerability arises from insufficient validation of frame lengths when processing Remote Transmission Request RTR replies. An attacker could exploit this by sending a specially crafted RTR reply, which m...

CVE-2026-74460

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...

AZL-96069 CVE-2026-74460 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...

CVE-2026-74460

In the Linux kernel, the following vulnerability has been resolved: can: emsusb: validate CPC message lengths emsusbreadbulkcallback walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the...

EUVD-2026-58879

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when updating timer and filter content while bcmrxhandler, bcmrxtimeouthandler...

PT-2026-72310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the CAN BCM module where simultaneous access to timer and filter values can occur. Specifically, bcm rx setup can overwrite values while bcm rx handler, bcm rx...

PT-2026-72304

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CAN BCM module where an ANYDEV rx operation where ifindex is 0 with an active RX timeout or throttle timer lacks defined semantics when matching frames arrive from...

ROS-20260806-73-0018

The vulnerability of the xcanwriteframe function in the drivers/net/can/xilinxcan.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013792)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013792 advisory. In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011291)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011291 advisory. In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndochangemtu to prevent buffer overflow Sending an PFPACKET allows to bypa...

The vulnerability of the m_can_read_fifo() function in the drivers/net/can/m_can/m_can.c file of the Linux kernel’s CAN device support driver allows a hacker to cause a service failure.

The vulnerability of the mcanreadfifo function in the drivers/net/can/mcan/mcan.c file of the Linux kernel’s CAN device support driver exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...