In the Linux kernel, the following vulnerability has been resolved:
can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
The `kvaser_usb_leaf_wait_cmd()` and `kvaser_usb_leaf_read_bulk_callback` functions contain logic to zero-length commands. These commands are used to align data to the USB endpoint's wMaxPacketSize boundary.
The driver attempts to skip these placeholders by aligning the buffer position `pos` to the next packet boundary using `round_up()` function.
However, if zero-length command is found exactly on a packet boundary (i.e., `pos` is a multiple of wMaxPacketSize, including 0), `round_up` function will return the unchanged value of `pos`. This prevents `pos` to be increased, causing an infinite loop in the parsing logic.
This patch fixes this in the function by using `pos + 1` instead. This ensures that even if `pos` is on a boundary, the calculation is based on `pos + 1`, forcing `round_up()` to always return the next aligned boundary.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 18, 2025 | Dec 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Dec 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-oracle-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-generic-64k-6.17Upgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-6.17.0-1010-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-generic-6.17Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1103-awsUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-realtime-6.17Upgrade linux-image-aws-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-raspiUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.17.0-1017-oemUpgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-fipsUpgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-6.17Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-xilinxUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-aws-6.17Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-raspi-6.17Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-173-genericUpgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-virtual-6.17Upgrade linux-image-virtualUpgrade linux-image-oem-24.04d | Mar 17, 2026 | Dec 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub