CVE-2022-49844
Published: May 1, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: can: dev: fix skb drop check In commit a6d190f8c767 ("can: skb: drop tx skb if in listen only mode") the priv->ctrlmode element is read even on virtual CAN interfaces that do not create the struct can_priv at startup. This out-of-bounds read may lead to CAN frame drops for virtual CAN interfaces like vcan and vxcan. This patch mainly reverts the original commit and adds a new helper for CAN interface drivers that provide the required information in struct can_priv. [mkl: patch pch_can, too]
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected a6d190f8c7670068d8c154ef8477eca07b5e3574 - < 386c49fe31ee748e053860b3bac7794a933ac9acaffected a6d190f8c7670068d8c154ef8477eca07b5e3574 - < ae64438be1923e3c1102d90fd41db7afcfaf54cc |
Linux | Linux | affected 6.0unaffected 0 - < 6.0unaffected 6.0.9 - <= 6.0.*unaffected 6.1 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now