CVE-2025-68343

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the CAN subsystem, specifically in the gs usb receive bulk callback() function. The driver incorrectly assumes the presence of a gs host frame structure and attempts to access its members without verifying the received data length. This can lead to a dereference of a null pointer if the received data is too short, potentially causing a system crash or other undefined behavior. The issue arises from accessing the header of the gs host frame structure without checking if the received data is large enough to contain the header. The code was modified to check the actual length before accessing the header and to use parent->hf size rx instead of dev->parent->hf size rx when resubmitting the URB.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.