PT-2024-10536 · Linux+6 · Linux Kernel+6
Ziyang Xuan
·
Published
2022-02-09
·
Updated
2025-11-12
·
CVE-2022-48830
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.16.0-rc8-syzkaller
Description
The issue is related to a potential CAN frame reception race in the
isotp rcv() function. When receiving a CAN frame, the current code logic does not consider concurrently receiving processes that do not show up in real-world usage. This can trigger skb over panic() in skb put(). The problem is fixed by adding a spin lock in isotp rcv() to ensure state changes and data structures stay consistent at CAN frame reception time.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the potential CAN frame reception race in
isotp rcv(). As a temporary workaround, consider adding a spin lock in isotp rcv() to ensure state changes and data structures stay consistent at CAN frame reception time.Exploit
Fix
Race Condition
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse