SB2026073035 - Expired pointer dereference in Linux kernel net/can/bcm.c in can: bcm

Description

This security bulletin contains information about 1 vulnerability.

1) Expired pointer dereference (CVE-ID: CVE-2026-17523)

CWE-ID: CWE-825 - Expired pointer dereference

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to execute arbitrary code within the kernel and escalate privileges.

The vulnerability exists due to CWE-825 in net/can/bcm.c in can: bcm when processing local CAN BCM operations. A local user can exploit the flaw to execute arbitrary code within the kernel and escalate privileges.

Successful exploitation can allow the attacker to gain root privileges and take full control of the affected system.

Remediation

Install update from vendor's website.

References

• https://access.redhat.com/security/cve/CVE-2026-17523
• https://bugzilla.redhat.com/show_bug.cgi?id=2507407
• https://github.com/torvalds/linux/commit/bf74aa86e111aa3b2fbb25db37e3a3fab71b5b68