48 matches found
4CAN
what is this thing? The 4CAN is a Raspberry Pi HAT which provides 4 CAN interfaces. The 4CAN is 100% compattible with socketcan and can-utils, and is very easy to get up and running. A microUSB-UART serial adaptor is included to make troubleshooting the pi easier, and there are 4 LEDs on board, 2...
SUSE CVE-2026-99033
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
DEBIAN-CVE-2026-99033
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
AZL-110894 CVE-2026-99033 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
CVE-2026-99033
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
CVE-2026-99033
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
EUVD-2026-108828
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
CVE-2026-99033 net/packet: guard the ll header push in packet_rcv_spkt()
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packetrcvspkt packetrcvspkt restores the link layer header with skbpushskb, skb-data - skbmacheaderskb; That subtraction is only meaningful when the device actually has a link layer header...
PT-2026-122010
In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packet rcv spkt packet rcv spkt restores the link layer header with skb pushskb, skb-data - skb mac headerskb; That subtraction is only meaningful when the device actually has a link layer...
CVE-2026-72122: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and silent RXSETUP failure bcmsendmsg reads bo-ifindex and checks bo-bound before taking locksock, while bcmnotify, bcmconnect and bcmrelease all mutate both fields under that same lock...
CVE-2026-23995
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ 16 to CAN open routines overflows ifreq.ifrname, corrupting adjacent stack data and enabling potential code execution. ...
CVE-2026-23995 EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ 16 to CAN open routines overflows ifreq.ifrname, corrupting adjacent stack data and enabling potential code execution. ...
EUVD-2026-16199
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ 16 to CAN open routines overflows ifreq.ifrname, corrupting adjacent stack data and enabling potential code execution. ...
CVE-2026-23995
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ 16 to CAN open routines overflows ifreq.ifrname, corrupting adjacent stack data and enabling potential code execution. ...
CVE-2026-23995: Stack-based Buffer Overflow
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ 16 to CAN open routines overflows ifreq.ifrname, corrupting adjacent stack data and enabling potential code execution. ...
PT-2026-28335
Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. A stack-based buffer overflow exists in the CAN interface initialization process. This occurs when an interface name exceeding IFNAMSIZ 16 characters is...
CVE-2026-22997
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939xtprxrtssessionactive: deactivate session upon receiving the second rts Since j1939sessiondeactivateactivatenext in j1939tprxtimer is called only when the timer is enabled, we need to call...
j1939_netdev_start() CAN Bus DoS
The vulnerability of the j1939netdevstart function in the net/can/j1939/main.c module, which supports J1939 CAN interfaces in Linux kernels, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2025-12932
Malicious code in bioql PyPI...
PT-2025-43616
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the peak usb CAN driver related to a shift-out-of-bounds issue. The driver did not explicitly use a 64-bit constant when shifting bits, which is...