Riskcovery

CVE-2023-52878

can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message and return with an error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to before 826120c9ba68f2d0dbae58e99013929c883d1444Affected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to before 0d30931f1fa0fb893fb7d5dc32b6b7edfb775be4Affected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to before 53c468008a7c9ca3f5fc985951f35ec2acae85bcAffected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to before 8ab67da060157362b2e0926692c659808784708fAffected
  • a6e4bc5304033e434fabccabb230b8e9ff55d76f to before 6411959c10fe917288cbb1038886999148560057Affected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 5.15.139 through 5.15.*Not affected
  • 6.1.63 through 6.1.*Not affected
  • 6.5.12 through 6.5.*Not affected
  • 6.6.2 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.