CVE-2026-17523

CVE-2026-17523

High · published July 27, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

This patch switches the timer to HRTIMER_MODE_SOFT, which executed the

timer callback in softirq context and removes the hrtimer_tasklet.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Published
2026-07-27T14:16Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.29.1, < 4.19.2264.19.226
linux/linux_kernel≥ 4.20, < 5.45.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
https://git.kernel.org/stable/c/79305a826f872fe446c6fbf8450f515053ef6951 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 27 JUL 08:58Z
    Kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges
    cvelistv5