Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74460

can: ems_usb: validate CPC message lengths

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: validate CPC message lengths ems_usb_read_bulk_callback() walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the fields used by the CAN, state, error and overrun handlers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 702171adeed3607ee9603ec30ce081411e36ae42 to < 1c380a332e342b7d58c86c4f556cb0823b16a9b8affected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6affected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < db5655287d78f00daf98888a520bb8da4d30126daffected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < ce8125566b1d0b0f16449407e014addf451804eaaffected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < 0b9090717c7e2184e2c427bbcc752f295116ac1daffected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < 0b23144c59c126beb4a7761a85a194ae0fe668a5affected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < df3ac2a672a5284441f120d486acabdd6740fc2aaffected
  • 702171adeed3607ee9603ec30ce081411e36ae42 to < 02925f51377f2a42a6724f00549167499c9302e5affected

Linux Linux

Default version status: affected

  • 2.6.32affected
  • 0 to < 2.6.32unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References