CVE-2023-53344

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc6-syzkaller-80422-geda666ff2276

Description The Linux kernel contains a flaw within the bcm tx setup function in the CAN (Controller Area Network) subsystem. Specifically, the issue involves an uninitialized value being used in a comparison after a potential error during a memory copy operation (memcpy from msg). This occurs when copying content to a newly allocated frame, potentially leading to a kernel memory safety issue. The vulnerability was identified through testing with Syzkaller, a coverage-guided fuzzer. The bcm tx setup function calls memcpy from msg to copy content, and if this function returns an error, the subsequent comparison uses uninitialized memory, triggering the issue.

Recommendations Update to Linux kernel version 6.2.0-rc6-syzkaller-80422-geda666ff2276 or a later version that includes the fix.