CVE-2026-72124

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ISO Transport Protocol (ISOTP) implementation of the CAN subsystem. The TX state machine, managed by the variable so->tx.state, is driven by sendmsg(), the RX path for Flow Control/echo frames, and hrtimers. A race condition occurs because sendmsg() uses a lock-free cmpxchg() claim while other parts of the code use so->rx lock for hrtimer cancel() calls. This creates windows where a frame or timer callback can operate on an outdated state, potentially corrupting unrelated transfers. The issue involves the following functions:

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.