can: gs_usb: gs_usb_receive_bulk_callback(): fix error message (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.13 % · centile 3 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error") a failing resubmit URB will print an info message. In the case of a short read where netdev has not yet been assigned, initialize as NULL to avoid dereferencing an undefined value. Also report the error value of the failed resubmit.
Faiblesses (CWE)
- CWE-476 — Déréférencement de pointeur nul
Références
- https://git.kernel.org/stable/c/7a431df418ee6b79841e0b4c7c265a791e3d0a75
- https://git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5
- https://git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6
- https://git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26
- https://git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9
- https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2026-5882
- GCVE · GCVE-0-2026-23155
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0329 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:6.6.122:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.12.68:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.18.8:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected da01de754e455e2598a7f1ce4ff2078c4f0ecde1 < 7a431df418ee6b79841e0b4c7c265a791e3d0a75 ; affected aa8a8866c533a150be4763bcb27993603bd5426c < aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 ; affected ce4352057fc5a986c76ece90801b9755e7c6e56c < 923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 ; affected c610b550ccc0438d456dfe1df9f4f36254ccaae3 < 8986cdf52f86208df9c7887fee23365b5d37da26 ; affected c3edc14da81a8d8398682f6e4ab819f09f37c0b7 < 713ba826ae114ab339c9a1b31e209bebdadb0ac9 ; affected 79a6d1bfe1148bc921b8d7f3371a7fbce44e30f7 < 494fc029f662c331e06b7c2031deff3c64200eed |
| Linux · Linux | affected 6.6.122 < 6.6.123 ; affected 6.12.68 < 6.12.69 ; affected 6.18.8 < 6.18.9 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |