6 matches found
CVE-2022-48830
In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotprcv When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The...
CVE-2022-48830
CVE-2022-48830 : Linux kernel fix for a CAN bus race in isotp_rcv() that could race with concurrent CAN frame reception, causing skb_over_panic when skb length changes during isotp_rcv_cf()/isotp_rcv_ff(). The patch adds a spin_lock around isotp_rcv() to ensure state synchronization and data-stru...
CVE-2022-48830 can: isotp: fix potential CAN frame reception race in isotp_rcv()
In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotprcv When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The...
GSD-2022-1000410 can: isotp: fix potential CAN frame reception race in isotp_rcv()
can: isotp: fix potential CAN frame reception race in isotprcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...
GSD-2022-1000359 can: isotp: fix potential CAN frame reception race in isotp_rcv()
can: isotp: fix potential CAN frame reception race in isotprcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.101 by commit...
PT-2022-28684
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.23 Description A potential issue exists in the isotp rcv function related to CAN frame reception. The actual impact and attack plausibility have not yet been proven. This issue was introduced in versio...