kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...

The vulnerability of the isotp_sendmsg() function in the net/can/isotp.c module of the Linux kernel’s CAN subsystem allows a hacker to cause a service failure.

The vulnerability of the isotpsendmsg function in the net/can/isotp.c module of the CAN subsystem of the Linux kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987644 advisory. In the Linux kernel, the following vulnerability has been resolved: can: isotp: isotpsendmsg: add result check for waiteventinterruptible Using waiteventinterruptibl...

SUSE CVE-2021-47457

In the Linux kernel, the following vulnerability has been resolved: can: isotp: isotpsendmsg: add result check for waiteventinterruptible Using waiteventinterruptible to wait for complete transmission, but do not check the result of waiteventinterruptible which can be interrupted. It will result ...

UBUNTU-CVE-2021-47457

In the Linux kernel, the following vulnerability has been resolved: can: isotp: isotpsendmsg: add result check for waiteventinterruptible Using waiteventinterruptible to wait for complete transmission, but do not check the result of waiteventinterruptible which can be interrupted. It will result ...

PT-2021-26317

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: A potential issue exists in the isotp sendmsg function, where the result of wait event interruptible is not properly checked. This issue was introduced in Linux Kernel version v5.10 and is...

PT-2021-30351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description A potential issue exists in the isotp sendmsg function, where the result of wait event interruptible is not properly checked. This issue was introduced in version v5.10 and is fixed in versio...