In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add locking for bcm_op runtime updates
The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.
Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-5.15.185-126.190Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 24, 2025 | Jun 8, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.31-35.92Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perf-debuginfo | Jun 24, 2025 | Jun 8, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 10, 2025 | Jun 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 8, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-default-manUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-default-develUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-azure-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-152-genericUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-raspi-6.14Upgrade linux-image-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azureUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-152-fipsUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k | Jun 26, 2025 | Jun 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub