CVE-2025-38003

can: bcm: add missing rcu read protection for procfs content

State: Published
Severity: 7.8 High
Published: Jun 8, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add missing rcu read protection for procfs content

When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF).

As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5b48f5711f1c630841ab78dcc061de902f0e37bf to before 19f553a1ddf260da6570ed8f8d91a8c87f49b63aAffected 85cd41070df992d3c0dfd828866fdd243d3b774a to before 659701c0b954ccdb4a916a4ad59bbc16e726d42cAffected f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1 to before 0622846db728a5332b917c797c733e202c4620aeAffected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 6d7d458c41b98a5c1670cbd36f2923c37de51cf5Affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 1f912f8484e9c4396378c39460bbea0af681f319Affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 63567ecd99a24495208dc860d50fb17440043006Affected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 7c9db92d5f0eadca30884af75c53d601edc512eeAffected f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before dac5e6249159ac255dad9781793dbe5908ac9ddbAffected fbac09a3b8890003c0c55294c00709f3ae5501bbAffected edb4baffb9483141a50fb7f7146cfe4a4c0c2db8Affected 5.4.205 to before 5.4.294Affected 5.10.130 to before 5.10.238Affected 5.15.54 to before 5.15.185Affected 4.19.252 to before 4.20Affected 5.18.11 to before 5.19Affected
LinuxLinux	5.19Affected before 5.19Not affected 5.4.294 through 5.4.Not affected 5.10.238 through 5.10.Not affected 5.15.185 through 5.15.Not affected 6.1.141 through 6.1.Not affected 6.6.93 through 6.6.Not affected 6.12.31 through 6.12.Not affected 6.14.9 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

5b48f5711f1c630841ab78dcc061de902f0e37bf to before 19f553a1ddf260da6570ed8f8d91a8c87f49b63aAffected
85cd41070df992d3c0dfd828866fdd243d3b774a to before 659701c0b954ccdb4a916a4ad59bbc16e726d42cAffected
f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1 to before 0622846db728a5332b917c797c733e202c4620aeAffected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 6d7d458c41b98a5c1670cbd36f2923c37de51cf5Affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 1f912f8484e9c4396378c39460bbea0af681f319Affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 63567ecd99a24495208dc860d50fb17440043006Affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before 7c9db92d5f0eadca30884af75c53d601edc512eeAffected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386 to before dac5e6249159ac255dad9781793dbe5908ac9ddbAffected
fbac09a3b8890003c0c55294c00709f3ae5501bbAffected
edb4baffb9483141a50fb7f7146cfe4a4c0c2db8Affected
5.4.205 to before 5.4.294Affected
5.10.130 to before 5.10.238Affected
5.15.54 to before 5.15.185Affected
4.19.252 to before 4.20Affected
5.18.11 to before 5.19Affected

LinuxLinux

5.19Affected
before 5.19Not affected
5.4.294 through 5.4.*Not affected
5.10.238 through 5.10.*Not affected
5.15.185 through 5.15.*Not affected
6.1.141 through 6.1.*Not affected
6.6.93 through 6.6.*Not affected
6.12.31 through 6.12.*Not affected
6.14.9 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.