CVE-2023-52941

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2025
Last modified:
28/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> can: isotp: split tx timer into transmission and timeout<br /> <br /> The timer for the transmission of isotp PDUs formerly had two functions:<br /> 1. send two consecutive frames with a given time gap<br /> 2. monitor the timeouts for flow control frames and the echo frames<br /> <br /> This led to larger txstate checks and potentially to a problem discovered<br /> by syzbot which enabled the panic_on_warn feature while testing.<br /> <br /> The former &amp;#39;txtimer&amp;#39; function is split into &amp;#39;txfrtimer&amp;#39; and &amp;#39;txtimer&amp;#39;<br /> to handle the two above functionalities with separate timer callbacks.<br /> <br /> The two simplified timers now run in one-shot mode and make the state<br /> transitions (especially with isotp_rcv_echo) better understandable.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.0.9 (including) 6.1 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1.1 (including) 6.1.11 (excluding)
cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*