In the Linux kernel, the following vulnerability has been resolved:
can: ucan: Fix infinite loop from zero-length messages
If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one.
This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 ("can: kvaser_usb: leaf: Fix potential infinite loop in command parsers"), so there must be some broken devices out there like this somewhere.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 25, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fips-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-azure-fde-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-intelUpgrade linux-image-gke-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-6.8.0-1059-nvidia | Jul 20, 2026 | Mar 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 25, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub