CVE-2022-48830

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc8-syzkaller

Description The issue is related to a potential CAN frame reception race in the isotp rcv() function. When receiving a CAN frame, the current code logic does not consider concurrently receiving processes that do not show up in real-world usage. This can trigger skb over panic() in skb put(). The problem is fixed by adding a spin lock in isotp rcv() to ensure state changes and data structures stay consistent at CAN frame reception time.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the potential CAN frame reception race in isotp rcv(). As a temporary workaround, consider adding a spin lock in isotp rcv() to ensure state changes and data structures stay consistent at CAN frame reception time.