CVE-2026-68387
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
17/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
can: raw: add locking for raw flags bitfield<br />
<br />
With commit 890e5198a6e5 ("can: raw: use bitfields to store flags in<br />
struct raw_sock") the formerly separate integer values have been integrated<br />
into a single bitfield. This led to a read-modify-write operation when<br />
changing a flag in raw_setsockopt() which now needs a locking to prevent<br />
concurrent access.<br />
<br />
Instead of adding a lock/unlock hell in each of the flag manipulations this<br />
patch introduces a wrapper for a new raw_setsockopt_locked() function<br />
analogue to the isotp_setsockopt[_locked]() approach in net/can/isotp.c<br />
<br />
[mkl: use Closes tag instead of Link]
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA