CVE-2022-49269

EUVD-2022-54957

26.02.2025, 07:01

In the Linux kernel, the following vulnerability has been resolved:

can: isotp: sanitize CAN ID checks in isotp_bind()

Syzbot created an environment that lead to a state machine status that
can not be reached with a compliant CAN ID address configuration.
The provided address information consisted of CAN ID 0x6000001 and 0xC28001
which both boil down to 11 bit CAN IDs 0x001 in sending and receiving.

Sanitize the SFF/EFF CAN ID values before performing the address checks.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	5.10 ≤ 𝑥 < 5.10.110
linux	linux_kernel	5.11 ≤ 𝑥 < 5.15.33
linux	linux_kernel	5.16 ≤ 𝑥 < 5.16.19
linux	linux_kernel	5.17 ≤ 𝑥 < 5.17.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.123-1 fixed
bookworm (security)	6.1.128-1 fixed
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.234-1 fixed
sid	6.12.16-1 fixed
trixie	6.12.12-1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

cluster-md-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.100.1

fixed

dlm-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.100.1

fixed

gfs2-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.100.1

fixed

kernel-64kb

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-default

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-default-base

suse enterprise server 15 SP4	5.14.21-150400.24.158.1.150400.24.78.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1.150500.6.47.1 fixed

kernel-docs

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-macros

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-obs-build

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-source

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-syms

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

kernel-zfcpdump

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

ocfs2-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.100.1

fixed

reiserfs-kmp-default

suse enterprise server 15 SP4	5.14.21-150400.24.158.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.100.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

kernel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug-devel-matched

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-debug-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-devel-matched

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-64k-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-abi-stablelists

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-devel-matched

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-debug-uki-virt

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-devel-matched

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-doc

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-debug

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-debug-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-debug-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-debug-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-debug-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-debug-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-64k-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-debug

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-debug-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-debug-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-debug-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-debug-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-debug-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-rt-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-tools

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-tools-libs

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-tools-libs-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-uki-virt

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-uki-virt-addons

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump-devel

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump-devel-matched

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump-modules

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump-modules-core

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

kernel-zfcpdump-modules-extra

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

libperf

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

perf

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

python3-perf

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

rtla

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

RHEL 9

0:5.14.0-611.5.1.el9_7

fixed

References

https://git.kernel.org/stable/c/3ea566422cbde9610c2734980d1286ab681bb40e

https://git.kernel.org/stable/c/7b4652fc71dcec043977a6def80ef5034c913615

https://git.kernel.org/stable/c/cf522d741f5301223cc94b978eb1603c7590d65e

https://git.kernel.org/stable/c/d72866a7f5326160d2a9d945a33eb6ef1883e25d

https://git.kernel.org/stable/c/f343dbe82314ab457153c9afd970be4e9e553020