In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add locking for bcm_op runtime updates
The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.
Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-develUpgrade rvUpgrade kernel-64k-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-64k-debugUpgrade kernel-64kUpgrade kernel-rt-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules | Oct 11, 2026 | Sep 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.185-126.190Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools | Jun 24, 2025 | Jun 8, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-livepatch-6.12.31-35.92Upgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-modules-extra | Jun 24, 2025 | Jun 8, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 10, 2025 | Jun 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 8, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Jun 8, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade libperfUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfo | Sep 15, 2026 | Sep 9, 2026 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade dtb-amdUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macros | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-gke-64kUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-fips | Jun 26, 2025 | Jun 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 8, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub