In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add locking for bcm_op runtime updates
The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.
Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-devel | Jun 24, 2025 | Jun 8, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-livepatch-6.1.141-155.222Upgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade perfUpgrade python3-perfUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-static | Jun 24, 2025 | Jun 8, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 10, 2025 | Jun 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 8, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Jun 8, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debug-devel-matchedUpgrade rtlaUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade libperfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extra | Sep 15, 2026 | Sep 9, 2026 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade gfs2-kmp-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-aws-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-6.14Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04 | Jun 26, 2025 | Jun 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub