In the Linux kernel, the following vulnerability has been resolved:

can: bcm: validate frame length in bcm_rx_setup() for RTR replies

bcm_tx_setup() validates cf->len against the CAN/CAN FD DLC limits
before installing frames for TX_SETUP, but bcm_rx_setup() never did
the same for the RTR-reply frame configured via RX_SETUP with
RX_RTR_FRAME.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00209.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ffd980f976e7fd666c2e61bf8ab35107efd11828 affected < 7d966cdee006911d3957e1a4e72cb93c39cd8c1e
ffd980f976e7fd666c2e61bf8ab35107efd11828 affected < 1b475c0c72f44622a320a4386ce9e76f85e69bc7
ffd980f976e7fd666c2e61bf8ab35107efd11828 affected < deb6a697cce3f021e731df543597f37a5e54caab
ffd980f976e7fd666c2e61bf8ab35107efd11828 affected < 59bfddea64159594feb62ef11b7d7a33c8ee3783
ffd980f976e7fd666c2e61bf8ab35107efd11828 affected < 62ec41f364648be79d54d94d0d240ee326948afd
Linux Linux affected
Version Status Constraints
2.6.25 affected —
0 unaffected < 2.6.25
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc4 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1b475c0c72f44622a320a4386ce9e76f85e69bc7 cve-icon cve-icon
https://git.kernel.org/stable/c/59bfddea64159594feb62ef11b7d7a33c8ee3783 cve-icon cve-icon
https://git.kernel.org/stable/c/62ec41f364648be79d54d94d0d240ee326948afd cve-icon cve-icon
https://git.kernel.org/stable/c/7d966cdee006911d3957e1a4e72cb93c39cd8c1e cve-icon cve-icon
https://git.kernel.org/stable/c/deb6a697cce3f021e731df543597f37a5e54caab cve-icon cve-icon
History

Sat, 15 Aug 2026 09:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-20

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup() for RTR replies bcm_tx_setup() validates cf->len against the CAN/CAN FD DLC limits before installing frames for TX_SETUP, but bcm_rx_setup() never did the same for the RTR-reply frame configured via RX_SETUP with RX_RTR_FRAME.
Title can: bcm: validate frame length in bcm_rx_setup() for RTR replies
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:52:54.750Z

Reserved: 2026-08-09T03:40:39.906Z

Link: CVE-2026-72114

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:25.803

Modified: 2026-08-15T06:21:25.803

Link: CVE-2026-72114

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T12:45:06Z

Weaknesses