In the Linux kernel, the following vulnerability has been resolved:
can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
can_put_echo_skb() takes ownership of the SKB and it may be freed during or after the call.
However, xilinx_can xcan_write_frame() keeps using SKB after the call.
Fix that by only calling can_put_echo_skb() after the code is done touching the SKB.
The tx_lock is held for the entire xcan_write_frame() execution and also on the can_get_echo_skb() side so the order of operations does not matter.
An earlier fix commit 3d3c817c3a40 ("can: xilinx_can: Fix usage of skb memory") did not move the can_put_echo_skb() call far enough.
[mkl: add "commit" in front of sha1 in patch description] [mkl: fix indention]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-sourceUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-rt-extraUpgrade dtb-cavium | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-5.15.0-170-genericUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidiaUpgrade linux-image-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fipsUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-azure-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-intelUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-aws-64k | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub