SUSE CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

PT-2024-11842

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the can rcv filter function. This occurs due to a missing initialization of ml priv in the receive path of CAN frames. The problem...

CVE-2022-2741 can: denial-of-service can be triggered by a crafted CAN frame

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...

USN-5505-1 linux-lts-xenial, linux-kvm vulnerabilities

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. CVE-2021-3609 Likang Luo discovered that a race condition existed in the Bluetoo...

USN-5416-1 linux-oem-5.14 vulnerabilities

Qiuhao Li, Gaoning Pan and Yongkang Jia discovered that the KVM implementation in the Linux kernel did not properly perform guest page table updates in some situations. An attacker in a guest vm could possibly use this to crash the host OS. CVE-2022-1158 It was discovered that the implementation ...

The vulnerability of the `mcba_usb_start_xmit` function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of mcbausbstartxmit in the Linux kernel’s drivers/net/can/usb/mcbausb.c file is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information from a remote location...

CVE-2022-26269

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...

Suzuki Connect 安全漏洞

Suzuki Connect is a web-based solution from Suzuki Japan. It is used to obtain vehicle information such as fuel, ignition status, current position, seat buckle status, and more. A security vulnerability exists in Suzuki Connect v1.0.15 that allows an attacker to tamper with displayed messages by...

.A flaw was found in the CAN BCM networking protocol in the Linux kernel where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

...

DEBIAN-CVE-2021-3609

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root...

USN-5299-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation could reassemble mixed encrypted and plaintext fragments. A physically proximate attacker could possibly use this issue to inject packets or exfiltrate selected fragments. CVE-2020-26147 It was discovered that the bluetooth...

The vulnerability in the `net/can/bcm.c` component of the Linux operating system allows a hacker to read a portion of the kernel’s memory.

The vulnerability in the net/can/bcm.c component of the Linux operating system exists due to the lack of initialization for a certain data structure. Exploiting this vulnerability could allow an attacker to read part of the kernel’s memory...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...

kernel: race condition in net/can/bcm.c leads to local privilege escalation

A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges...