Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52878

can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

Description

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message and return with an error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to < 826120c9ba68f2d0dbae58e99013929c883d1444affected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to < 0d30931f1fa0fb893fb7d5dc32b6b7edfb775be4affected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to < 53c468008a7c9ca3f5fc985951f35ec2acae85bcaffected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to < 8ab67da060157362b2e0926692c659808784708faffected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to < 6411959c10fe917288cbb1038886999148560057affected

Linux Linux

Default version status: affected

  • 2.6.33affected
  • 0 to < 2.6.33unaffected
  • 5.15.139 to ≤ 5.15.*unaffected
  • 6.1.63 to ≤ 6.1.*unaffected
  • 6.5.12 to ≤ 6.5.*unaffected
  • 6.6.2 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References