Description
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5b48f5711f1c630841ab78dcc061de902f0e37bf to < 19f553a1ddf260da6570ed8f8d91a8c87f49b63aaffected85cd41070df992d3c0dfd828866fdd243d3b774a to < 659701c0b954ccdb4a916a4ad59bbc16e726d42caffectedf34f2a18e47b73e48f90a757e1f4aaa8c7d665a1 to < 0622846db728a5332b917c797c733e202c4620aeaffectedf1b4e32aca0811aa011c76e5d6cf2fa19224b386 to < 6d7d458c41b98a5c1670cbd36f2923c37de51cf5affectedf1b4e32aca0811aa011c76e5d6cf2fa19224b386 to < 1f912f8484e9c4396378c39460bbea0af681f319affectedf1b4e32aca0811aa011c76e5d6cf2fa19224b386 to < 63567ecd99a24495208dc860d50fb17440043006affectedf1b4e32aca0811aa011c76e5d6cf2fa19224b386 to < 7c9db92d5f0eadca30884af75c53d601edc512eeaffectedf1b4e32aca0811aa011c76e5d6cf2fa19224b386 to < dac5e6249159ac255dad9781793dbe5908ac9ddbaffectedfbac09a3b8890003c0c55294c00709f3ae5501bbaffectededb4baffb9483141a50fb7f7146cfe4a4c0c2db8affected5.4.205 to < 5.4.294affected5.10.130 to < 5.10.238affected5.15.54 to < 5.15.185affected4.19.252 to < 4.20affected5.18.11 to < 5.19affected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected5.4.294 to ≤ 5.4.*unaffected5.10.238 to ≤ 5.10.*unaffected5.15.185 to ≤ 5.15.*unaffected6.1.141 to ≤ 6.1.*unaffected6.6.93 to ≤ 6.6.*unaffected6.12.31 to ≤ 6.12.*unaffected6.14.9 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a ↗
- https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c ↗
- https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae ↗
- https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5 ↗
- https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319 ↗
- https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006 ↗
- https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee ↗
- https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗