NetSight
IP …
medium5.5

CVE-2023-52878

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of b…

Impact

In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message and return with an error.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.33 before 5.15.139
from 5.16 before 6.1.63
from 6.2 before 6.5.12
from 6.6 before 6.6.2

Weakness classification

CWE-125

References