CVE-2026-74455

can: peak_usb: validate uCAN receive record lengths

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 19, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: peak_usb: validate uCAN receive record lengths

pcan_usb_fd_decode_buf() walks uCAN records packed in one USB receive buffer.

Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying them into the skb.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 276d989cd2dd88e2b7ab2c96fd10c86836b12781Affected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before bf9d787b7e1ef59be19b35abca08194772deb97eAffected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 89c92a8052698dbbd3652a77c04d02bbd74a3275Affected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 6067c878e38d02a3d5c43497347e143f85c9064aAffected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 2c8f08f3641a074da40acf05baa5a18ae2739260Affected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 2427ef427bdd78d862c7c76597bfd9eda88b81f1Affected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before d9c115948c3dd5fcc2d0245cec5eb76c098503c8Affected 0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 93fcab2c6968446316bbb49548848df604d6346fAffected
LinuxLinux	4.0Affected before 4.0Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 276d989cd2dd88e2b7ab2c96fd10c86836b12781Affected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before bf9d787b7e1ef59be19b35abca08194772deb97eAffected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 89c92a8052698dbbd3652a77c04d02bbd74a3275Affected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 6067c878e38d02a3d5c43497347e143f85c9064aAffected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 2c8f08f3641a074da40acf05baa5a18ae2739260Affected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 2427ef427bdd78d862c7c76597bfd9eda88b81f1Affected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before d9c115948c3dd5fcc2d0245cec5eb76c098503c8Affected
0a25e1f4f18566b750ebd3ae995af64e23111e63 to before 93fcab2c6968446316bbb49548848df604d6346fAffected

LinuxLinux

4.0Affected
before 4.0Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.