CVE-2026-23362

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> can: bcm: fix locking for bcm_op runtime updates<br /> <br /> Commit c2aba69d0c36 ("can: bcm: add locking for bcm_op runtime updates")<br /> added a locking for some variables that can be modified at runtime when<br /> updating the sending bcm_op with a new TX_SETUP command in bcm_tx_setup().<br /> <br /> Usually the RX_SETUP only handles and filters incoming traffic with one<br /> exception: When the RX_RTR_FRAME flag is set a predefined CAN frame is<br /> sent when a specific RTR frame is received. Therefore the rx bcm_op uses<br /> bcm_can_tx() which uses the bcm_tx_lock that was only initialized in<br /> bcm_tx_setup(). Add the missing spin_lock_init() when allocating the<br /> bcm_op in bcm_rx_setup() to handle the RTR case properly.