CVE-2022-49269
published 2025-02-26CVE-2022-49269: In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotp_bind() Syzbot created an environment that lead…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
18.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
can: isotp: sanitize CAN ID checks in isotp_bind()
Syzbot created an environment that lead to a state machine status that
can not be reached with a compliant CAN ID address configuration.
The provided address information consisted of CAN ID 0x6000001 and 0xC28001
which both boil down to 11 bit CAN IDs 0x001 in sending and receiving.
Sanitize the SFF/EFF CAN ID values before performing the address checks.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.17.3-1 (bookworm) | linux 5.17.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e057dd3fc20ffb3d7f150af46542a51b59b90127 < d72866a7f5326160d2a9d945a33eb6ef1883e25d | d72866a7f5326160d2a9d945a33eb6ef1883e25d |
| linux | linux | >= e057dd3fc20ffb3d7f150af46542a51b59b90127 < f343dbe82314ab457153c9afd970be4e9e553020 | f343dbe82314ab457153c9afd970be4e9e553020 |
| linux | linux | >= e057dd3fc20ffb3d7f150af46542a51b59b90127 < cf522d741f5301223cc94b978eb1603c7590d65e | cf522d741f5301223cc94b978eb1603c7590d65e |
| linux | linux | >= e057dd3fc20ffb3d7f150af46542a51b59b90127 < 7b4652fc71dcec043977a6def80ef5034c913615 | 7b4652fc71dcec043977a6def80ef5034c913615 |
| linux | linux | >= e057dd3fc20ffb3d7f150af46542a51b59b90127 < 3ea566422cbde9610c2734980d1286ab681bb40e | 3ea566422cbde9610c2734980d1286ab681bb40e |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 0 < 5.17.3-1 | 5.17.3-1 |
| linux | linux_kernel | >= 5.10 < 5.10.110 | 5.10.110 |
| linux | linux_kernel | >= 5.11 < 5.15.33 | 5.15.33 |
| linux | linux_kernel | >= 5.16 < 5.16.19 | 5.16.19 |
| linux | linux_kernel | >= 5.17 < 5.17.2 | 5.17.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: can: isotp: sanitize CAN ID checks in isotp_bind()
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49269 [MEDIUM] kernel: can: isotp: sanitize CAN ID checks in isotp_bind()
kernel: can: isotp: sanitize CAN ID checks in isotp_bind()
In the Linux kernel, the following vulnerability has been resolved:
can: isotp: sanitize CAN ID checks in isotp_bind()
Syzbot created an environment that lead to a state machine status that
can not be reached with a compliant CAN ID address configuration.
The provided address information consisted of CAN ID 0x6000001 and 0xC28001
which both boil down to 11 bit CAN IDs 0x001 in sending and receiving.
Sanitize the SFF/EFF CAN ID values before performing the address checks.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel
Debian
CVE-2022-49269: linux - In the Linux kernel, the following vulnerability has been resolved: can: isotp:...
vendor_debian·2022·CVSS 5.5
CVE-2022-49269 [MEDIUM] CVE-2022-49269: linux - In the Linux kernel, the following vulnerability has been resolved: can: isotp:...
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotp_bind() Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted of CAN ID 0x6000001 and 0xC28001 which both boil down to 11 bit CAN IDs 0x001 in sending and receiving. Sanitize the SFF/EFF CAN ID values before performing the address checks.
Scope: local
bookworm: resolved (fixed in 5.17.3-1)
bullseye: resolved (fixed in 5.10.113-1)
forky: resolved (fixed in 5.17.3-1)
sid: resolved (fixed in 5.17.3-1)
trixie: resolved (fixed in 5.17.3-1)
GHSA
GHSA-39ww-6ww3-69g8: In the Linux kernel, the following vulnerability has been resolved:
can: isotp: sanitize CAN ID checks in isotp_bind()
Syzbot created an environment
ghsa_unreviewed·2025-10-21
CVE-2022-49269 [MEDIUM] GHSA-39ww-6ww3-69g8: In the Linux kernel, the following vulnerability has been resolved:
can: isotp: sanitize CAN ID checks in isotp_bind()
Syzbot created an environment
In the Linux kernel, the following vulnerability has been resolved:
can: isotp: sanitize CAN ID checks in isotp_bind()
Syzbot created an environment that lead to a state machine status that
can not be reached with a compliant CAN ID address configuration.
The provided address information consisted of CAN ID 0x6000001 and 0xC28001
which both boil down to 11 bit CAN IDs 0x001 in sending and receiving.
Sanitize the SFF/EFF CAN ID values before performing the address checks.
OSV
CVE-2022-49269: In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotp_bind() Syzbot created an environment t
osv·2025-02-26·CVSS 5.5
CVE-2022-49269 [MEDIUM] CVE-2022-49269: In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotp_bind() Syzbot created an environment t
In the Linux kernel, the following vulnerability has been resolved: can: isotp: sanitize CAN ID checks in isotp_bind() Syzbot created an environment that lead to a state machine status that can not be reached with a compliant CAN ID address configuration. The provided address information consisted of CAN ID 0x6000001 and 0xC28001 which both boil down to 11 bit CAN IDs 0x001 in sending and receiving. Sanitize the SFF/EFF CAN ID values before performing the address checks.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3ea566422cbde9610c2734980d1286ab681bb40ehttps://git.kernel.org/stable/c/7b4652fc71dcec043977a6def80ef5034c913615https://git.kernel.org/stable/c/cf522d741f5301223cc94b978eb1603c7590d65ehttps://git.kernel.org/stable/c/d72866a7f5326160d2a9d945a33eb6ef1883e25dhttps://git.kernel.org/stable/c/f343dbe82314ab457153c9afd970be4e9e553020
2025-02-26
Published