CVE-2026-72114

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the can: bcm module where the bcm rx setup() function fails to validate the frame length for RTR (Remote Transmission Request) replies configured via RX SETUP with RX RTR FRAME. While the bcm tx setup() function correctly validates the cf->len variable against CAN/CAN FD DLC (Data Length Code) limits, the same validation is missing in the receive setup process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.