Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-trace-baseUpgrade preload-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-extraUpgrade ofed-kmp-rtUpgrade kernel-vmiUpgrade kernel-pae-extraUpgrade kernel-vmi-baseUpgrade kernel-ppc64Upgrade kernel-rt-develUpgrade preload-kmp-desktopUpgrade kernel-rt_trace-baseUpgrade kernel-trace-extraUpgrade kernel-debugUpgrade kernel-rt_traceUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-rt-baseUpgrade kernel-desktop-develUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-paeUpgrade iscsitarget-kmp-rtUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-syms-rtUpgrade kernel-vmi-develUpgrade kernel-traceUpgrade kernel-rtUpgrade kernel-docsUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-xen-develUpgrade kernel-ppc64-extraUpgrade kernel-trace-develUpgrade brocade-bna-kmp-rtUpgrade kernel-rt_trace-develUpgrade kernel-ec2Upgrade kernel-desktopUpgrade kernel-ps3Upgrade kernel-pae-develUpgrade kernel-vanillaUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-ppc64-baseUpgrade kernel-xen-extraUpgrade kernel-debug-baseUpgrade kernel-desktop-baseUpgrade kernel-ec2-baseUpgrade kernel-default-extra | Feb 17, 2015 | Sep 8, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-208-doveUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-virtual | Nov 8, 2024 | Sep 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub