CVE-2026-68387

can: raw: add locking for raw flags bitfield

State: Published
Severity: 7.8 High
Published: Aug 10, 2026
Updated: Aug 17, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: raw: add locking for raw flags bitfield

With commit 890e5198a6e5 ("can: raw: use bitfields to store flags in struct raw_sock") the formerly separate integer values have been integrated into a single bitfield. This led to a read-modify-write operation when changing a flag in raw_setsockopt() which now needs a locking to prevent concurrent access.

Instead of adding a lock/unlock hell in each of the flag manipulations this patch introduces a wrapper for a new raw_setsockopt_locked() function analogue to the isotp_setsockopt[_locked]() approach in net/can/isotp.c

[mkl: use Closes tag instead of Link]

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	890e5198a6e5b238627c245fafea1a92670a86cd to before 00ba4bf8798242253fefc1fa6a78db1d445fd024Affected 890e5198a6e5b238627c245fafea1a92670a86cd to before 57791aab1129c9405f84bb0882de58967d8b44cdAffected 890e5198a6e5b238627c245fafea1a92670a86cd to before 1e5185c090589f4146d728ab36417d8a5419f127Affected
LinuxLinux	6.18Affected before 6.18Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.