Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74455

can: peak_usb: validate uCAN receive record lengths

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: validate uCAN receive record lengths pcan_usb_fd_decode_buf() walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying them into the skb.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < 276d989cd2dd88e2b7ab2c96fd10c86836b12781affected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < bf9d787b7e1ef59be19b35abca08194772deb97eaffected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < 89c92a8052698dbbd3652a77c04d02bbd74a3275affected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < 6067c878e38d02a3d5c43497347e143f85c9064aaffected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < 2c8f08f3641a074da40acf05baa5a18ae2739260affected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < 2427ef427bdd78d862c7c76597bfd9eda88b81f1affected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < d9c115948c3dd5fcc2d0245cec5eb76c098503c8affected
  • 0a25e1f4f18566b750ebd3ae995af64e23111e63 to < 93fcab2c6968446316bbb49548848df604d6346faffected

Linux Linux

Default version status: affected

  • 4.0affected
  • 0 to < 4.0unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References