Description
In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing check to block non-AF_CAN binds. Syzbot created some code which matched the right sockaddr struct size but used AF_XDP (0x2C) instead of AF_CAN (0x1D) in the address family field: bind$xdp(r2, &(0x7f0000000540)={0x2c, 0x0, r4, 0x0, r2}, 0x10) ^^^^ This has no funtional impact but the userspace should be notified about the wrong address family field content.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e057dd3fc20ffb3d7f150af46542a51b59b90127 to < de3c02383aa678f6799402ac47fdd89cf4bfcaa9affectede057dd3fc20ffb3d7f150af46542a51b59b90127 to < 2fc6f337257f4f7c21ecff429241f7acaa6df4e8affectede057dd3fc20ffb3d7f150af46542a51b59b90127 to < 9427584c2f153d0677ef3bad6f44028c60d728c4affectede057dd3fc20ffb3d7f150af46542a51b59b90127 to < dd4faace51e41a82a8c0770ee0cc26088f9d9d06affectede057dd3fc20ffb3d7f150af46542a51b59b90127 to < c6adf659a8ba85913e16a571d5a9bcd17d3d1234affected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.10.200 to ≤ 5.10.*unaffected5.15.138 to ≤ 5.15.*unaffected6.1.16 to ≤ 6.1.*unaffected6.2.3 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/de3c02383aa678f6799402ac47fdd89cf4bfcaa9 ↗
- https://git.kernel.org/stable/c/2fc6f337257f4f7c21ecff429241f7acaa6df4e8 ↗
- https://git.kernel.org/stable/c/9427584c2f153d0677ef3bad6f44028c60d728c4 ↗
- https://git.kernel.org/stable/c/dd4faace51e41a82a8c0770ee0cc26088f9d9d06 ↗
- https://git.kernel.org/stable/c/c6adf659a8ba85913e16a571d5a9bcd17d3d1234 ↗