In the Linux kernel, the following vulnerability has been resolved:
can: ctucanfd: handle skb allocation failure
If skb allocation fails, the pointer to struct can_frame is NULL. This is actually handled everywhere inside ctucan_err_interrupt() except for the only place.
Add the missed NULL check.
Found by Linux Verification Center (linuxtesting.org) with SVACE static analysis tool.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-lg | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1015-azure-fde | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub