CVE-2023-52887

net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new

State: Published
Severity: 7.5 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new

This patch enhances error handling in scenarios with RTS (Request to Send) messages arriving closely. It replaces the less informative WARN_ON_ONCE backtraces with a new error handling method. This provides clearer error messages and allows for the early termination of problematic sessions. Previously, sessions were only released at the end of j1939_xtp_rx_rts().

Potentially this could be reproduced with something like: testj1939 -r vcan0:0x80 & while true; do # send first RTS cansend vcan0 18EC8090#1014000303002301; # send second RTS cansend vcan0 18EC8090#1014000303002301; # send abort cansend vcan0 18EC8090#ff00000000002301; done

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d71dd0c70099914fcd063135da3c580865e924c to before ed581989d7ea9df6f8646beba2341e32cd49a1f9Affected 9d71dd0c70099914fcd063135da3c580865e924c to before f6c839e717901dbd6b1c1ca807b6210222eb70f6Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 1762ca80c2b72dd1b5821c5e347713ae696276eaAffected 9d71dd0c70099914fcd063135da3c580865e924c to before 26b18dd30e63d4fd777be429148e8e4ed66f60b2Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 177e33b655d35d72866b50aec84307119dc5f3d4Affected 9d71dd0c70099914fcd063135da3c580865e924c to before 0bc0a7416ea73f79f915c9a05ac0858dff65cfedAffected 9d71dd0c70099914fcd063135da3c580865e924c to before d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fbAffected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.279 through 5.4.Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.97 through 6.1.Not affected 6.6.37 through 6.6.Not affected 6.9.8 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

9d71dd0c70099914fcd063135da3c580865e924c to before ed581989d7ea9df6f8646beba2341e32cd49a1f9Affected
9d71dd0c70099914fcd063135da3c580865e924c to before f6c839e717901dbd6b1c1ca807b6210222eb70f6Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 1762ca80c2b72dd1b5821c5e347713ae696276eaAffected
9d71dd0c70099914fcd063135da3c580865e924c to before 26b18dd30e63d4fd777be429148e8e4ed66f60b2Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 177e33b655d35d72866b50aec84307119dc5f3d4Affected
9d71dd0c70099914fcd063135da3c580865e924c to before 0bc0a7416ea73f79f915c9a05ac0858dff65cfedAffected
9d71dd0c70099914fcd063135da3c580865e924c to before d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fbAffected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.279 through 5.4.*Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.97 through 6.1.*Not affected
6.6.37 through 6.6.*Not affected
6.9.8 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.