Description
In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If skb allocation fails, the pointer to struct can_frame is NULL. This is actually handled everywhere inside ctucan_err_interrupt() except for the only place. Add the missed NULL check. Found by Linux Verification Center (linuxtesting.org) with SVACE static analysis tool.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2dcb8e8782d8e4c38903bf37b1a24d3ffd193da7 to < 84b9ac59978a6a4e0812d1c938fad97306272cefaffected2dcb8e8782d8e4c38903bf37b1a24d3ffd193da7 to < e505b83b9ee6aa0ae2f4395f573a66579ae403fbaffected2dcb8e8782d8e4c38903bf37b1a24d3ffd193da7 to < b0e592dd46a0a952b41c3bf6c963afdd6a42b526affected2dcb8e8782d8e4c38903bf37b1a24d3ffd193da7 to < e7e2e2318b1f085044126ba553a4e619842fc36daffected2dcb8e8782d8e4c38903bf37b1a24d3ffd193da7 to < 9bd24927e3eeb85642c7baa3b28be8bea6c2a078affected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected6.1.129 to ≤ 6.1.*unaffected6.6.79 to ≤ 6.6.*unaffected6.12.16 to ≤ 6.12.*unaffected6.13.4 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/84b9ac59978a6a4e0812d1c938fad97306272cef ↗
- https://git.kernel.org/stable/c/e505b83b9ee6aa0ae2f4395f573a66579ae403fb ↗
- https://git.kernel.org/stable/c/b0e592dd46a0a952b41c3bf6c963afdd6a42b526 ↗
- https://git.kernel.org/stable/c/e7e2e2318b1f085044126ba553a4e619842fc36d ↗
- https://git.kernel.org/stable/c/9bd24927e3eeb85642c7baa3b28be8bea6c2a078 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html ↗