CVE-2021-46994

can: mcp251x: fix resume from sleep before interface was brought up

published February 28, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: mcp251x: fix resume from sleep before interface was brought up

Since 8ce8c0abcba3 the driver queues work via priv->restart_work when

resuming after suspend, even when the interface was not previously

enabled. This causes a null dereference error as the workqueue is only

allocated and initialized in mcp251x_open().

To fix this we move the workqueue init to mcp251x_can_probe() as there

is no reason to do it later and repeat it whenever mcp251x_open() is

called.

[mkl: fix error handling in mcp251x_stop()]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Published
2024-02-28T08:13Z
EPSS history
Timeline
  • 28 FEB 08:13Z
    can: mcp251x: fix resume from sleep before interface was brought up
    cvelistv5