CVE-2026-72116

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the CAN BCM module where stale receive (RX) and transmit (TX) operations persist after device removal. For RX operations, an RX SETUP update for an existing operation could skip the can rx register() function even if a concurrent NETDEV UNREGISTER had already removed its registration, resulting in a failure to re-enable frame delivery for the updated filter. For TX operations, the bcm notify() function only handled bo->rx ops during NETDEV UNREGISTER, which left tx ops with an active cyclic transmission that indefinitely re-armed its high-resolution timer (hrtimer) to execute the bcm tx timeout handler() function. This could lead to a runaway timer and potential injection into a later reused ifindex variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.