CVE - CVE-2022-48977

CVE-ID
CVE-2022-48977	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: can: af_can: fix NULL pointer dereference in can_rcv_filter Analogue to commit 8aa59e355949 ("can: af_can: fix NULL pointer dereference in can_rx_register()") we need to check for a missing initialization of ml_priv in the receive path of CAN frames. Since commit 4e096a18867a ("net: introduce CAN specific pointer in the struct net_device") the check for dev->type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0acc442309a0a1b01bcdaa135e56e6398a49439c URL:https://git.kernel.org/stable/c/0acc442309a0a1b01bcdaa135e56e6398a49439c MISC:https://git.kernel.org/stable/c/3982652957e8d79ac32efcb725450580650a8644 URL:https://git.kernel.org/stable/c/3982652957e8d79ac32efcb725450580650a8644 MISC:https://git.kernel.org/stable/c/c142cba37de29f740a3852f01f59876af8ae462a URL:https://git.kernel.org/stable/c/c142cba37de29f740a3852f01f59876af8ae462a MISC:https://git.kernel.org/stable/c/c42221efb1159d6a3c89e96685ee38acdce86b6f URL:https://git.kernel.org/stable/c/c42221efb1159d6a3c89e96685ee38acdce86b6f MISC:https://git.kernel.org/stable/c/fcc63f2f7ee3038d53216edd0d8291e57c752557 URL:https://git.kernel.org/stable/c/fcc63f2f7ee3038d53216edd0d8291e57c752557
Assigning CNA
kernel.org
Date Record Created
20240822	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240822)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)