In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add locking for bcm_op runtime updates
The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.
Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.238-231.953Upgrade bpftoolUpgrade kernel-livepatch-5.15.185-126.190Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfo | Jun 24, 2025 | Jun 8, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.141-155.222Upgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel | Jun 24, 2025 | Jun 8, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 10, 2025 | Jun 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 8, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-debugUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-gke-64kUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-fips-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-intelUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-fips | Jun 26, 2025 | Jun 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub