CVE-2026-72120

can: bcm: add missing rcu list annotations and operations

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add missing rcu list annotations and operations

sashiko-bot remarked the missing use of list_add_rcu() in bcm_[rx|tx]_setup() to have a proper initialized bcm_op structure when bcm_proc_show() traverses the bcm_op's under rcu_read_lock().

To cover all initial settings of the bcm_op's the list_add_rcu() calls are moved to the end of the setup code.

While at it, also fix the mirroring removal side: bcm_release() called bcm_remove_op() - which frees the op via call_rcu() - on ops that were still linked in bo->tx_ops/bo->rx_ops, without list_del_rcu() first. Unlink each op with list_del_rcu() before handing it to bcm_remove_op(), matching the existing pattern in bcm_delete_tx_op()/bcm_delete_rx_op().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	659701c0b954ccdb4a916a4ad59bbc16e726d42c to before 8357255e56dc1aaa437e3c53ee9385de984e0d57Affected 0622846db728a5332b917c797c733e202c4620ae to before 8e1c7257c81577130f5ce90f69b2a2c3ce63f957Affected 6d7d458c41b98a5c1670cbd36f2923c37de51cf5 to before eb1c26eab4d1f0b4450439b4b88c3e73faf1da98Affected 1f912f8484e9c4396378c39460bbea0af681f319 to before f53bdab85e64eb57d6899a30d1307fd5a3639cc7Affected 63567ecd99a24495208dc860d50fb17440043006 to before 4e22e8b505f877573bbdfdbcb680babad9b2f7a1Affected dac5e6249159ac255dad9781793dbe5908ac9ddb to before b06a4a397ac826603f39875cb7c7819a41365196Affected dac5e6249159ac255dad9781793dbe5908ac9ddb to before 30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1dAffected dac5e6249159ac255dad9781793dbe5908ac9ddb to before 7b2c3eabc4dafc062a25e10711154f2107526a78Affected 19f553a1ddf260da6570ed8f8d91a8c87f49b63aAffected 7c9db92d5f0eadca30884af75c53d601edc512eeAffected 5.10.238 to before 5.10.261Affected 5.15.185 to before 5.15.212Affected 6.1.141 to before 6.1.178Affected 6.6.93 to before 6.6.145Affected 6.12.31 to before 6.12.97Affected 5.4.294 to before 5.5Affected 6.14.9 to before 6.15Affected
LinuxLinux	6.15Affected before 6.15Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

659701c0b954ccdb4a916a4ad59bbc16e726d42c to before 8357255e56dc1aaa437e3c53ee9385de984e0d57Affected
0622846db728a5332b917c797c733e202c4620ae to before 8e1c7257c81577130f5ce90f69b2a2c3ce63f957Affected
6d7d458c41b98a5c1670cbd36f2923c37de51cf5 to before eb1c26eab4d1f0b4450439b4b88c3e73faf1da98Affected
1f912f8484e9c4396378c39460bbea0af681f319 to before f53bdab85e64eb57d6899a30d1307fd5a3639cc7Affected
63567ecd99a24495208dc860d50fb17440043006 to before 4e22e8b505f877573bbdfdbcb680babad9b2f7a1Affected
dac5e6249159ac255dad9781793dbe5908ac9ddb to before b06a4a397ac826603f39875cb7c7819a41365196Affected
dac5e6249159ac255dad9781793dbe5908ac9ddb to before 30f7bb922cb7e7f072a56c7cb7a5efccd2ceca1dAffected
dac5e6249159ac255dad9781793dbe5908ac9ddb to before 7b2c3eabc4dafc062a25e10711154f2107526a78Affected
19f553a1ddf260da6570ed8f8d91a8c87f49b63aAffected
7c9db92d5f0eadca30884af75c53d601edc512eeAffected
5.10.238 to before 5.10.261Affected
5.15.185 to before 5.15.212Affected
6.1.141 to before 6.1.178Affected
6.6.93 to before 6.6.145Affected
6.12.31 to before 6.12.97Affected
5.4.294 to before 5.5Affected
6.14.9 to before 6.15Affected

LinuxLinux

6.15Affected
before 6.15Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.