CVE-2026-23155: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
In the Linux kernel, the following vulnerability has been resolved:
can: gsusb: gsusbreceivebulkcallback(): fix error message
Sinc commit 79a6d1bfe114 ("can: gsusb: gsusbreceivebulkcallback(): unanchor URL on usbsubmiturb() error") a failing resubmit URB will print an info message.
In the case of a short read where netdev has not yet been assigned, initialize as NULL to avoid dereferencing an undefined value. Also report the error value of the failed resubmit.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23155?
CVE-2026-23155 has a low severity rating as it primarily addresses an error message fix.
How do I fix CVE-2026-23155?
To fix CVE-2026-23155, update your Linux kernel to the latest stable version where the patch has been applied.
What systems are affected by CVE-2026-23155?
CVE-2026-23155 affects certain versions of the Linux kernel that utilize the gs_usb driver.
What type of vulnerability is CVE-2026-23155?
CVE-2026-23155 is classified as an information disclosure vulnerability related to error handling in the gs_usb driver.
When was CVE-2026-23155 disclosed?
CVE-2026-23155 was disclosed following the commit made to the Linux kernel addressing the issue.