CVE-2026-68387
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
17/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
can: raw: add locking for raw flags bitfield<br />
<br />
With commit 890e5198a6e5 ("can: raw: use bitfields to store flags in<br />
struct raw_sock") the formerly separate integer values have been integrated<br />
into a single bitfield. This led to a read-modify-write operation when<br />
changing a flag in raw_setsockopt() which now needs a locking to prevent<br />
concurrent access.<br />
<br />
Instead of adding a lock/unlock hell in each of the flag manipulations this<br />
patch introduces a wrapper for a new raw_setsockopt_locked() function<br />
analogue to the isotp_setsockopt[_locked]() approach in net/can/isotp.c<br />
<br />
[mkl: use Closes tag instead of Link]
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH