CVE-2022-49269: can: isotp: sanitize CAN ID checks in isotp_bind()
In the Linux kernel, the following vulnerability has been resolved:
can: isotp: sanitize CAN ID checks in isotpbind()
Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted of CAN ID 0x6000001 and 0xC28001 which both boil down to 11 bit CAN IDs 0x001 in sending and receiving.
Sanitize the SFF/EFF CAN ID values before performing the address checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49269?
The severity of CVE-2022-49269 is classified as medium with a CVSS score of 5.5.
How do I fix CVE-2022-49269?
To fix CVE-2022-49269, ensure that you update to the patched version of the Linux kernel where the vulnerability has been resolved.
What systems are affected by CVE-2022-49269?
CVE-2022-49269 affects various versions of the Linux kernel and related IBM security products.
What type of vulnerability is CVE-2022-49269?
CVE-2022-49269 is a vulnerability related to improper sanitization of CAN ID checks in the isotp_bind() function.
What are the potential impacts of CVE-2022-49269?
The potential impact of CVE-2022-49269 includes denial of service due to high availability being compromised.