CVE-2022-49844

can: dev: fix skb drop check

High · published May 1, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: dev: fix skb drop check

In commit a6d190f8c767 ("can: skb: drop tx skb if in listen only

mode") the priv->ctrlmode element is read even on virtual CAN

interfaces that do not create the struct can_priv at startup. This

out-of-bounds read may lead to CAN frame drops for virtual CAN

interfaces like vcan and vxcan.

This patch mainly reverts the original commit and adds a new helper

for CAN interface drivers that provide the required information in

struct can_priv.

[mkl: patch pch_can, too]

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Published
2025-05-01T14:09Z
EPSS history
Timeline
  • 01 MAY 14:09Z
    can: dev: fix skb drop check
    cvelistv5