In the Linux kernel, the following vulnerability has been resolved:
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
syzbot reported a warning in bcm_release(). [0]
The blamed change fixed another warning that is triggered when connect() is issued again for a socket whose connect()ed device has been unregistered.
However, if the socket is just close()d without the 2nd connect(), the remaining bo->bcm_proc_read triggers unnecessary remove_proc_entry() in bcm_release().
Let's clear bo->bcm_proc_read after remove_proc_entry() in bcm_notify().
[0] name '4986' WARNING: CPU: 0 PID: 5234 at fs/proc/generic.c:711 remove_proc_entry+0x2e7/0x5d0 fs/proc/generic.c:711 Modules linked in: CPU: 0 UID: 0 PID: 5234 Comm: syz-executor606 Not tainted 6.11.0-rc5-syzkaller-00178-g5517ae241919 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:remove_proc_entry+0x2e7/0x5d0 fs/proc/generic.c:711 Code: ff eb 05 e8 cb 1e 5e ff 48 8b 5c 24 10 48 c7 c7 e0 f7 aa 8e e8 2a 38 8e 09 90 48 c7 c7 60 3a 1b 8c 48 89 de e8 da 42 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 RSP: 0018:ffffc9000345fa20 EFLAGS: 00010246 RAX: 2a2d0aee2eb64600 RBX: ffff888032f1f548 RCX: ffff888029431e00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000345fb08 R08: ffffffff8155b2f2 R09: 1ffff1101710519a R10: dffffc0000000000 R11: ffffed101710519b R12: ffff888011d38640 R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcfb52722f0 CR3: 000000000e734000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> bcm_release+0x250/0x880 net/can/bcm.c:1578 __sock_release net/socket.c:659 [inline] sock_close+0xbc/0x240 net/socket.c:1421 __fput+0x24a/0x8a0 fs/file_table.c:422 task_work_run+0x24f/0x310 kernel/task_work.c:228 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0xa2f/0x27f0 kernel/exit.c:882 do_group_exit+0x207/0x2c0 kernel/exit.c:1031 __do_sys_exit_group kernel/exit.c:1042 [inline] __se_sys_exit_group kernel/exit.c:1040 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1040 x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fcfb51ee969 Code: Unable to access opcode bytes at 0x7fcfb51ee93f. RSP: 002b:00007ffce0109ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fcfb51ee969 RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 RBP: 00007fcfb526f3b0 R08: ffffffffffffffb8 R09: 0000555500000000 R10: 0000555500000000 R11: 0000000000000246 R12: 00007fcfb526f3b0 R13: 0000000000000000 R14: 00007fcfb5271ee0 R15: 00007fcfb51bf160 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.168-114.166Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 9, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-oem-24.04Upgrade linux-image-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1070-gke | Dec 18, 2024 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub