CVE-2026-17523: can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
can: bcm: switch timer to HRTIMERMODESOFT and remove hrtimertasklet commit bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68
This patch switches the timer to HRTIMERMODESOFT, which executed the timer callback in softirq context and removes the hrtimertasklet.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
can: bcm: switch timer to HRTIMERMODESOFT and remove hrtimertasklet
This patch switches the timer to HRTIMERMODESOFT, which executed the timer callback in softirq context and removes the hrtimertasklet.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17523?
The severity of CVE-2026-17523 is high with a CVSS score of 7.8.
How does CVE-2026-17523 allow privilege escalation?
CVE-2026-17523 allows an unprivileged local user to execute arbitrary code within the kernel, leading to local privilege escalation.
Which software is affected by CVE-2026-17523?
CVE-2026-17523 affects the Linux Kernel.
Can CVE-2026-17523 be exploited remotely?
CVE-2026-17523 requires local access to the system, making it a local privilege escalation vulnerability.
What are the potential consequences of exploiting CVE-2026-17523?
Exploiting CVE-2026-17523 could allow an attacker to gain root privileges and take full control of the affected system.