In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add locking for bcm_op runtime updates
The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.
Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.185-126.190Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo | Jun 24, 2025 | Jun 8, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-headersUpgrade kernel6.12Upgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-static | Jun 24, 2025 | Jun 8, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 10, 2025 | Jun 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 8, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Jun 8, 2025 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-zfcpdump-core | Sep 15, 2026 | Sep 9, 2026 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-rockchip | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-intelUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-kvm-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-oracle-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-5.15.0-1090-awsUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-raspi | Jun 26, 2025 | Jun 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub