VDB
DEBIAN-CVE-2026-23298
DEBIAN-CVE-2026-23298
PUBLISHED
CVSS 8.699999809265137 HIGH
In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to 0, then the driver will loop for forever in ucan_read_bulk_callback(), hanging the system. If the length is 0, just skip the message and go on to the next one. This has been fixed in the kvaser_usb driver in the past in commit 0c73772cd2b8 ("can: kvaser_usb: leaf: Fix potential infinite loop in command parsers"), so there must be some broken devices out there like this somewhere.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | linux | 6.0.5-1, 6.17.7-1, 6.17.8-1 |
| Debian:14 | linux | 6.13, 6.14.3-1, 6.14.5-1 |
| Debian:12 | linux | 6.4.11-1, 6.4.4-1~bpo12+1, 6.4.4-2 |
| Debian:11 | linux-6.1 | 6.1.106-3, 6.1.106-3, 6.1.106-3 |
| Debian:13 | linux | 6.12.41-1, 6.12.43-1, 6.12.43-1 |
Exploit Intelligence
- 4593.2.0.yml (github-poc)
- 4628.1.0.yml (github-poc)
- 2026-05-06_426_linux-signed-amd64.yaml (github-poc)
Timeline
- Mar 25, 2026 CVE Published
- May 2, 2026 CVE Updated