CVE Database
/

CVE-2026-23362

Back to search

CVE-2026-23362

Published: Mar 25, 2026

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcm_op runtime updates Commit c2aba69d0c36 ("can: bcm: add locking for bcm_op runtime updates") added a locking for some variables that can be modified at runtime when updating the sending bcm_op with a new TX_SETUP command in bcm_tx_setup(). Usually the RX_SETUP only handles and filters incoming traffic with one exception: When the RX_RTR_FRAME flag is set a predefined CAN frame is sent when a specific RTR frame is received. Therefore the rx bcm_op uses bcm_can_tx() which uses the bcm_tx_lock that was only initialized in bcm_tx_setup(). Add the missing spin_lock_init() when allocating the bcm_op in bcm_rx_setup() to handle the RTR case properly.

VendorProductVersions

Linux

Linux

affected
7595de7bc56e0e52b74e56c90f7e247bf626d628 - < 0904037e713f787d1376e1d349c3bdf6c3105881
affected
fbd8fdc2b218e979cfe422b139b8f74c12419d1f - < c85b96eaf766d8f066b1139a17a51efa2f6627ef
affected
2a437b86ac5a9893c902f30ef66815bf13587bf6 - < 800f26f11ae37b17f58e0001f28a47dd75c26557
affected
76c84c3728178b2d38d5604e399dfe8b0752645e - < 70e951afad4c025261fe3c952d2b07237e320a01
affected
cc55dd28c20a6611e30596019b3b2f636819a4c0 - < 8bcf2d847adb82b2c617456f6da17ac5e6c75285

+12 more versions

Linux

Linux

affected
6.15
unaffected
0 - < 6.15
unaffected
5.10.253 - <= 5.10.*
unaffected
5.15.203 - <= 5.15.*
unaffected
6.1.167 - <= 6.1.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now