In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add locking for bcm_op runtime updates
The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.
Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-livepatch-5.10.238-231.953 | Jun 24, 2025 | Jun 8, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel6.12Upgrade python3-perfUpgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.31-35.92Upgrade perfUpgrade kernel-devel | Jun 24, 2025 | Jun 8, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 10, 2025 | Jun 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 8, 2025 |
| Suse | — | Upgrade dtb-amdUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade dtb-sprdUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azure | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-6.8Upgrade linux-image-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-6.8 | Jun 26, 2025 | Jun 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub