{"id":"CVE-2026-74455","state":"PUBLISHED","title":"can: peak_usb: validate uCAN receive record lengths","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncan: peak_usb: validate uCAN receive record lengths\n\npcan_usb_fd_decode_buf() walks uCAN records packed in one USB\nreceive buffer.\n\nRequire each record to contain the fixed header for its type, and verify\nCAN payload bytes before copying them into the skb.","publishedAt":"2026-08-15T12:26:58.175Z","updatedAt":"2026-08-19T16:36:48.775Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"276d989cd2dd88e2b7ab2c96fd10c86836b12781","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"bf9d787b7e1ef59be19b35abca08194772deb97e","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"89c92a8052698dbbd3652a77c04d02bbd74a3275","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"6067c878e38d02a3d5c43497347e143f85c9064a","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"2c8f08f3641a074da40acf05baa5a18ae2739260","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"2427ef427bdd78d862c7c76597bfd9eda88b81f1","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"d9c115948c3dd5fcc2d0245cec5eb76c098503c8","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"93fcab2c6968446316bbb49548848df604d6346f","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/can/usb/peak_usb/pcan_usb_fd.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.0","versionType":"semver"},{"version":"5.10.265","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.151","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.103","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.44","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.8","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/can/usb/peak_usb/pcan_usb_fd.c"]}],"references":["https://git.kernel.org/stable/c/276d989cd2dd88e2b7ab2c96fd10c86836b12781","https://git.kernel.org/stable/c/bf9d787b7e1ef59be19b35abca08194772deb97e","https://git.kernel.org/stable/c/89c92a8052698dbbd3652a77c04d02bbd74a3275","https://git.kernel.org/stable/c/6067c878e38d02a3d5c43497347e143f85c9064a","https://git.kernel.org/stable/c/2c8f08f3641a074da40acf05baa5a18ae2739260","https://git.kernel.org/stable/c/2427ef427bdd78d862c7c76597bfd9eda88b81f1","https://git.kernel.org/stable/c/d9c115948c3dd5fcc2d0245cec5eb76c098503c8","https://git.kernel.org/stable/c/93fcab2c6968446316bbb49548848df604d6346f"],"weaknesses":[],"ingestedAt":"2026-10-29T20:12:58.252Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/74xxx/CVE-2026-74455.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-74455","state":"PUBLISHED","datePublished":"2026-08-15T12:26:58.175Z","dateUpdated":"2026-08-19T16:36:48.775Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-08-15T05:44:03.900Z"},"containers":{"cna":{"title":"can: peak_usb: validate uCAN receive record lengths","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncan: peak_usb: validate uCAN receive record lengths\n\npcan_usb_fd_decode_buf() walks uCAN records packed in one USB\nreceive buffer.\n\nRequire each record to contain the fixed header for its type, and verify\nCAN payload bytes before copying them into the skb."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"276d989cd2dd88e2b7ab2c96fd10c86836b12781","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"bf9d787b7e1ef59be19b35abca08194772deb97e","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"89c92a8052698dbbd3652a77c04d02bbd74a3275","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"6067c878e38d02a3d5c43497347e143f85c9064a","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"2c8f08f3641a074da40acf05baa5a18ae2739260","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"2427ef427bdd78d862c7c76597bfd9eda88b81f1","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"d9c115948c3dd5fcc2d0245cec5eb76c098503c8","versionType":"git"},{"version":"0a25e1f4f18566b750ebd3ae995af64e23111e63","status":"affected","lessThan":"93fcab2c6968446316bbb49548848df604d6346f","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/can/usb/peak_usb/pcan_usb_fd.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.0","versionType":"semver"},{"version":"5.10.265","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.151","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.103","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.44","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.8","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/can/usb/peak_usb/pcan_usb_fd.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/276d989cd2dd88e2b7ab2c96fd10c86836b12781"},{"url":"https://git.kernel.org/stable/c/bf9d787b7e1ef59be19b35abca08194772deb97e"},{"url":"https://git.kernel.org/stable/c/89c92a8052698dbbd3652a77c04d02bbd74a3275"},{"url":"https://git.kernel.org/stable/c/6067c878e38d02a3d5c43497347e143f85c9064a"},{"url":"https://git.kernel.org/stable/c/2c8f08f3641a074da40acf05baa5a18ae2739260"},{"url":"https://git.kernel.org/stable/c/2427ef427bdd78d862c7c76597bfd9eda88b81f1"},{"url":"https://git.kernel.org/stable/c/d9c115948c3dd5fcc2d0245cec5eb76c098503c8"},{"url":"https://git.kernel.org/stable/c/93fcab2c6968446316bbb49548848df604d6346f"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-19T16:36:48.775Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.10.265"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.15.216"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.1.183"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.6.151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.12.103"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.18.44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"7.1.8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"7.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}