CVE-2026-74460

can: ems_usb: validate CPC message lengths

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Oct 3, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: ems_usb: validate CPC message lengths

ems_usb_read_bulk_callback() walks CPC messages packed in one USB receive buffer.

Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the fields used by the CAN, state, error and overrun handlers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	702171adeed3607ee9603ec30ce081411e36ae42 to before 1c380a332e342b7d58c86c4f556cb0823b16a9b8Affected 702171adeed3607ee9603ec30ce081411e36ae42 to before bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6Affected 702171adeed3607ee9603ec30ce081411e36ae42 to before db5655287d78f00daf98888a520bb8da4d30126dAffected 702171adeed3607ee9603ec30ce081411e36ae42 to before ce8125566b1d0b0f16449407e014addf451804eaAffected 702171adeed3607ee9603ec30ce081411e36ae42 to before 0b9090717c7e2184e2c427bbcc752f295116ac1dAffected 702171adeed3607ee9603ec30ce081411e36ae42 to before 0b23144c59c126beb4a7761a85a194ae0fe668a5Affected 702171adeed3607ee9603ec30ce081411e36ae42 to before df3ac2a672a5284441f120d486acabdd6740fc2aAffected 702171adeed3607ee9603ec30ce081411e36ae42 to before 02925f51377f2a42a6724f00549167499c9302e5Affected
LinuxLinux	2.6.32Affected before 2.6.32Not affected 5.10.271 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

702171adeed3607ee9603ec30ce081411e36ae42 to before 1c380a332e342b7d58c86c4f556cb0823b16a9b8Affected
702171adeed3607ee9603ec30ce081411e36ae42 to before bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6Affected
702171adeed3607ee9603ec30ce081411e36ae42 to before db5655287d78f00daf98888a520bb8da4d30126dAffected
702171adeed3607ee9603ec30ce081411e36ae42 to before ce8125566b1d0b0f16449407e014addf451804eaAffected
702171adeed3607ee9603ec30ce081411e36ae42 to before 0b9090717c7e2184e2c427bbcc752f295116ac1dAffected
702171adeed3607ee9603ec30ce081411e36ae42 to before 0b23144c59c126beb4a7761a85a194ae0fe668a5Affected
702171adeed3607ee9603ec30ce081411e36ae42 to before df3ac2a672a5284441f120d486acabdd6740fc2aAffected
702171adeed3607ee9603ec30ce081411e36ae42 to before 02925f51377f2a42a6724f00549167499c9302e5Affected

LinuxLinux

2.6.32Affected
before 2.6.32Not affected
5.10.271 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.