Out-of-bounds write in Linux kernel - CVE-2026-31570
Published: April 25, 2026
Vulnerability identifier: #VU127828
CSH Severity: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-31570
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Linux kernel
Linux kernel
Software vendor:
Linux Foundation
Linux Foundation
Description
The vulnerability allows a local user to cause a denial of service or corrupt memory.
The vulnerability exists due to an out-of-bounds write in cgw_csum_crc8_rel() when processing CAN gateway crc8 checksum configuration with crafted negative indices. A local user can supply crafted checksum index values to cause a denial of service or corrupt memory.
Exploitation requires CAP_NET_ADMIN to configure the can-gw crc8 checksums.
Remediation
Install security update from vendor's repository.
External links
- https://git.kernel.org/stable/c/54ecdf76a55e75c1f5085e440f8ab671a3283ef5
- https://git.kernel.org/stable/c/66b689efd08227da2c5ca49b58b30a95d23c695a
- https://git.kernel.org/stable/c/84f8b76d24273175a22713e83e90874e1880d801
- https://git.kernel.org/stable/c/999ca48d55a8a46da21519db7e834e5867200379
- https://git.kernel.org/stable/c/a025283d7f7404c739225e457fb99db2368bb544
- https://git.kernel.org/stable/c/b9c310d72783cc2f30d103eed83920a5a29c671a
- https://git.kernel.org/stable/c/c4e8eaa75fa0b6bcbfa5356d6195c4ad0e05e57a
- https://git.kernel.org/stable/c/e7c99348b0612b2bc02d5ce6ff9873261cc7605f