CVE-2026-72119

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the CAN BCM driver where the bcm can tx() and bcm tx timeout handler() functions could observe partially updated or unvalidated frames. This occurs because data and timer updates were not sufficiently protected. Additionally, a missing error path in memcpy from msg() when copying CAN frame data from userspace was identified. On 32-bit platforms, a torn 64-bit ktime t read could occur during updates to kt ival1, kt ival2, ival1, and ival2 within bcm tx setup(), bcm tx set expiry(), and bcm tx timeout handler() due to insufficient locking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.