Riskcovery

CVE-2023-52941

can: isotp: split tx timer into transmission and timeout

State
Published
Severity
Not scored
Published
Mar 27, 2025
Updated
May 23, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

can: isotp: split tx timer into transmission and timeout

The timer for the transmission of isotp PDUs formerly had two functions: 1. send two consecutive frames with a given time gap 2. monitor the timeouts for flow control frames and the echo frames

This led to larger txstate checks and potentially to a problem discovered by syzbot which enabled the panic_on_warn feature while testing.

The former 'txtimer' function is split into 'txfrtimer' and 'txtimer' to handle the two above functionalities with separate timer callbacks.

The two simplified timers now run in one-shot mode and make the state transitions (especially with isotp_rcv_echo) better understandable.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 866337865f3747c68a3e7bb837611e39cec1ecd6 to before cae4c9bc35f72af5d4a079bb9d9fd62c4088a411Affected
  • 866337865f3747c68a3e7bb837611e39cec1ecd6 to before 4f027cba8216f42a18b544842efab134f8b1f9f4Affected
  • 3cb476cf834edca47f4470c276feb0f519401fb7Affected
  • 6.0.9 to before 6.1Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.11 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.