CVE-2026-5071

Name of the Vulnerable Software and Affected Versions SocketCAN (affected versions not specified)

Description The SocketCAN implementation contains an out-of-bounds read issue. The function zcan sendto ctx() validates the length of a user-provided buffer containing a socketcan frame object using only a NET ASSERT statement. In production builds where assertions are disabled, a userspace application can control the length passed to a sendto syscall to provide an incomplete or truncated frame. This causes the socketcan to can frame() function to dereference fields beyond the buffer end, potentially leading to denial-of-service crashes or the leakage of adjacent memory as the parsed contents are transmitted over the network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.