CVE-2022-48977

can: af_can: fix NULL pointer dereference in can_rcv_filter

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 23, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

can: af_can: fix NULL pointer dereference in can_rcv_filter

Analogue to commit 8aa59e355949 ("can: af_can: fix NULL pointer dereference in can_rx_register()") we need to check for a missing initialization of ml_priv in the receive path of CAN frames.

Since commit 4e096a18867a ("net: introduce CAN specific pointer in the struct net_device") the check for dev->type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4ac1feff6ea6495cbfd336f4438a6c6d140544a6 to before 3982652957e8d79ac32efcb725450580650a8644Affected 1a5751d58b14195f763b8c1d9ef33fb8a93e95e7 to before c42221efb1159d6a3c89e96685ee38acdce86b6fAffected 4e096a18867a5a989b510f6999d9c6b6622e8f7b to before c142cba37de29f740a3852f01f59876af8ae462aAffected 4e096a18867a5a989b510f6999d9c6b6622e8f7b to before fcc63f2f7ee3038d53216edd0d8291e57c752557Affected 4e096a18867a5a989b510f6999d9c6b6622e8f7b to before 0acc442309a0a1b01bcdaa135e56e6398a49439cAffected 96340078d50a54f6a1252c62596bc44321c8bff9Affected 5.4.110 to before 5.4.227Affected 5.10.28 to before 5.10.159Affected 5.11.12 to before 5.12Affected
LinuxLinux	5.12Affected before 5.12Not affected 5.4.227 through 5.4.Not affected 5.10.159 through 5.10.Not affected 5.15.83 through 5.15.Not affected 6.0.13 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

4ac1feff6ea6495cbfd336f4438a6c6d140544a6 to before 3982652957e8d79ac32efcb725450580650a8644Affected
1a5751d58b14195f763b8c1d9ef33fb8a93e95e7 to before c42221efb1159d6a3c89e96685ee38acdce86b6fAffected
4e096a18867a5a989b510f6999d9c6b6622e8f7b to before c142cba37de29f740a3852f01f59876af8ae462aAffected
4e096a18867a5a989b510f6999d9c6b6622e8f7b to before fcc63f2f7ee3038d53216edd0d8291e57c752557Affected
4e096a18867a5a989b510f6999d9c6b6622e8f7b to before 0acc442309a0a1b01bcdaa135e56e6398a49439cAffected
96340078d50a54f6a1252c62596bc44321c8bff9Affected
5.4.110 to before 5.4.227Affected
5.10.28 to before 5.10.159Affected
5.11.12 to before 5.12Affected

LinuxLinux

5.12Affected
before 5.12Not affected
5.4.227 through 5.4.*Not affected
5.10.159 through 5.10.*Not affected
5.15.83 through 5.15.*Not affected
6.0.13 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.