CVE-2026-72114: can: bcm: validate frame length in bcm_rx_setup() for RTR replies
In the Linux kernel, the following vulnerability has been resolved:
can: bcm: validate frame length in bcmrxsetup() for RTR replies
bcmtxsetup() validates cf->len against the CAN/CAN FD DLC limits before installing frames for TXSETUP, but bcmrxsetup() never did the same for the RTR-reply frame configured via RXSETUP with RXRTRFRAME.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72114?
CVE-2026-72114 has a risk score of 23, indicating a moderate level of severity.
How do I fix CVE-2026-72114?
To fix CVE-2026-72114, update your Linux kernel to the patched version that addresses this vulnerability.
What type of vulnerability is CVE-2026-72114?
CVE-2026-72114 is a vulnerability related to improper validation of frame length in the bcm_rx_setup() function in the Linux kernel.
What systems are affected by CVE-2026-72114?
CVE-2026-72114 affects systems running specific versions of the Linux kernel that utilize the CAN protocol.
Is there a known exploit for CVE-2026-72114?
As of now, there are no publicly known exploits for CVE-2026-72114.