Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcantxhandler: fixed the issue where skb was freed after it had been used. The canPUTechoskb function clones a skb and then frees it. This function should be moved directly before the start of the xmit in hardware for...

RLSA-2025:20518 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...

SUSE CVE-2025-37993

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcanclassallocatedev: initialize spin lock on device probe The spin lock txhandlingspinlock in struct mcanclassdev is not being initialized. This leads the following spinlock bad magic complaint from the kernel, eg. wh...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized txhandlingspinlock in mcanclassdev...

CVE-2020-8539

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities. In addition, this executable may be used by an attacker t...

SUSE CVE-2022-49659

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcanreadfifo,echotxevent: shift timestamp to full 32 bits In commit 1be37d3b0414 "can: mcan: fix periph RX path: use rx-offload to ensure skbs are sent from softirq context" the RX path for peripheral devices was...

DEBIAN-CVE-2022-49659

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcanreadfifo,echotxevent: shift timestamp to full 32 bits In commit 1be37d3b0414 "can: mcan: fix periph RX path: use rx-offload to ensure skbs are sent from softirq context" the RX path for peripheral devices was...

UBUNTU-CVE-2022-49275

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcantxhandler: fix use after free of skb canputechoskb will clone skb then free the skb. Move the canputechoskb for the mcan version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch...

PT-2025-8203

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.0.x Description A use after free issue in the Linux kernel has been resolved. The problem occurred in the m can tx handler function, where can put echo skb would clone and then free an skb. To fix this, the can put echo...

PT-2024-11884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the m can pci remove and error handling path of m can pci probe functions. The issue arises because m can cla...

PT-2022-32689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.54 Description The issue concerns a potential security vulnerability in the Linux Kernel. It involves the m can read fifo,echo tx event function, where a shift of the timestamp to full 32 bits may have...

PT-2022-32475

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.11 Description The issue concerns a potential security vulnerability in the Linux Kernel. It involves the m can read fifo,echo tx event function, where a timestamp is shifted to full 32 bits. The actual...

PT-2022-30410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a use after free of skb in the m can tx handler function. This problem was introduced in version v3.18 and is fixed in Linux Kernel version v5.10.110. The actual impa...

PT-2022-29888

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a use after free of skb in the m can tx handler function. This problem was introduced in version v3.18 and is fixed in Linux Kernel version v5.16.19. The actual impact...

PT-2022-30197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a use after free of skb in the m can tx handler function. This problem was introduced in version v3.18 and is fixed in Linux Kernel version v5.15.33. The actual impact...

PT-2022-29582

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a use after free of skb in the m can tx handler function. This problem was introduced in version v3.18 and is fixed in Linux Kernel version v5.17.2. The actual impact a...

PT-2021-27055

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.8 Description A memory leak issue was discovered in the error branch of the m can read fifo function. This issue was introduced in Linux Kernel version v5.15 and is fixed in version v5.15.8. The actual impa...

KOFFEE - Kia OFFensivE Exploit

This module exploits CVE-2020-8539, which is an arbitrary code execution vulnerability that allows an to attacker execute the micomd binary file on the head unit of Kia Motors. This module has been tested on SOP.003.30.18.0703, SOP.005.7.181019 and SOP.007.1.191209 head unit software versions. Th...

Input validation

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities. In addition, this executable may be used by an attacker t...

CVE-2020-8539

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon, to trigger unintended functionalities. In addition, this executable may be used by an attacker t...