CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's CAN (Controller Area Network) subsystem, specifically in the bcm_rx_setup() function, which fails to validate the frame length for RTR (Remote Transmission Request) replies. This oversight could lead to potential buffer overflows or unexpected behavior when processing RTR frames, posing risks to system stability and security. Organizations utilizing Linux in environments that rely on CAN communications should prioritize addressing this vulnerability to mitigate potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup() for RTR replies bcm_tx_setup() validates cf->len against the CAN/CAN FD DLC limits before installing frames for TX_SETUP, but bcm_rx_setup() never did the same for the RTR-reply frame configured via RX_SETUP with RX_RTR_FRAME.