In the Linux kernel, the following vulnerability has been resolved:
can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
can_put_echo_skb() takes ownership of the SKB and it may be freed during or after the call.
However, xilinx_can xcan_write_frame() keeps using SKB after the call.
Fix that by only calling can_put_echo_skb() after the code is done touching the SKB.
The tx_lock is held for the entire xcan_write_frame() execution and also on the can_get_echo_skb() side so the order of operations does not matter.
An earlier fix commit 3d3c817c3a40 ("can: xilinx_can: Fix usage of skb memory") did not move the can_put_echo_skb() call far enough.
[mkl: add "commit" in front of sha1 in patch description] [mkl: fix indention]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-obs-build | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1100-awsUpgrade linux-image-fips-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-genericUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-realtimeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-5.15.0-170-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-nolpae | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub