In the Linux kernel, the following vulnerability has been resolved:
can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
can_put_echo_skb() takes ownership of the SKB and it may be freed during or after the call.
However, xilinx_can xcan_write_frame() keeps using SKB after the call.
Fix that by only calling can_put_echo_skb() after the code is done touching the SKB.
The tx_lock is held for the entire xcan_write_frame() execution and also on the can_get_echo_skb() side so the order of operations does not matter.
An earlier fix commit 3d3c817c3a40 ("can: xilinx_can: Fix usage of skb memory") did not move the can_put_echo_skb() call far enough.
[mkl: add "commit" in front of sha1 in patch description] [mkl: fix indention]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-170-genericUpgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intelUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-azure-6.8Upgrade linux-image-virtual | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub