CVE-2023-54105

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the CAN (Controller Area Network) subsystem, specifically in the isotp bind() function. A missing check allows bindings with address families other than AF CAN (0x1D) to occur, such as AF XDP (0x2C). While this does not cause a functional impact, it results in userspace not being notified about the incorrect address family field content. The issue was identified through fuzzing with Syzbot, which created code using an incorrect address family within the sockaddr structure during a bind operation. The vulnerable function is isotp bind().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.